Required actions must be followed at the site when a smartphone has been lost or stolen.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-24969	WIR-SPP-007-02	SV-30706r5_rule	ECSC-1	Low

Description
If procedures for lost or stolen smartphones are not followed, it is more likely that an adversary could obtain the device and use it to access DoD networks or otherwise compromise DoD IA.

STIG	Date
Wireless Management Server Policy Security Technical Implementation Guide	2011-11-28

Details

Check Text ( C-31133r3_chk )
This requirement applies to mobile operating system (OS) smartphones and tablets. Interview the IAO. Determine if any site smartphones were reported lost or stolen within the previous 24 months. If yes, review written records, incident reports, and/or after action reports and determine if required procedures were followed. Mark as a finding if the site had a lost or stolen smartphone within the previous 24 months and required procedures were not followed.

Check Text ( C-31133r3_chk )

This requirement applies to mobile operating system (OS) smartphones and tablets.

Interview the IAO. Determine if any site smartphones were reported lost or stolen within the previous 24 months. If yes, review written records, incident reports, and/or after action reports and determine if required procedures were followed.

Mark as a finding if the site had a lost or stolen smartphone within the previous 24 months and required procedures were not followed.

Fix Text (F-27592r1_fix)
Required actions must be followed at the site when a smartphone is reported lost or stolen.