STIGQter: STIG Summary: Google Android 10.x Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Jan 2020:

Google Android 10 must be configured to lock the display after 15 minutes (or less) of inactivity.

DISA Rule

SV-108031r2_rule

Vulnerability Number

V-98927

Group Title

PP-MDF-301040

Rule Version

GOOG-10-000400

Severity

CAT II

CCI(s)

• CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Configure the Google Android device to lock the device display after 15 minutes (or less) of inactivity.

On the MDM Console:
1. Open password requirements.
2. Open device password section.
3. Set "Max time to screen lock" to any number between 1 and 15.

Check Contents

Review Google Android device configuration settings to determine if the mobile device has the screen lock timeout set to 15 minutes or less.

This validation procedure is performed on both the MDM Administration Console and the Android 10 device.

On the MDM console, do the following:

1. Open passcode requirement
2. Open device passcode section.
3. Ensure "Max time to screen lock" is set to any number between 1 and 15.

On the Android 10 device, do the following:
1. Open settings >> Security.
2. Tap on "Screen timeout".
3. Ensure the Screen timeout value is set to between 0 and 15 minutes.

If the MDM console device policy is not set to 15 minutes or less for the screen lock timeout or on the Android 10 device, the device policy is not set to 15 minutes or less for the screen lock timeout, this is a finding.

Vulnerability Number

V-98927

Documentable

False

Rule Version

GOOG-10-000400

Severity Override Guidance

Review Google Android device configuration settings to determine if the mobile device has the screen lock timeout set to 15 minutes or less.

This validation procedure is performed on both the MDM Administration Console and the Android 10 device.

On the MDM console, do the following:

1. Open passcode requirement
2. Open device passcode section.
3. Ensure "Max time to screen lock" is set to any number between 1 and 15.

On the Android 10 device, do the following:
1. Open settings >> Security.
2. Tap on "Screen timeout".
3. Ensure the Screen timeout value is set to between 0 and 15 minutes.

If the MDM console device policy is not set to 15 minutes or less for the screen lock timeout or on the Android 10 device, the device policy is not set to 15 minutes or less for the screen lock timeout, this is a finding.

Check Content Reference

M

Target Key

3581

Comments