STIGQter: STIG Summary: Google Android 11 COBO Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2020:

Google Android 11 must be configured to lock the display after 15 minutes (or less) of inactivity.

DISA Rule

SV-228577r510289_rule

Vulnerability Number

V-228577

Group Title

PP-MDF-301040

Rule Version

GOOG-11-000400

Severity

CAT II

CCI(s)

• CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Configure the Google Android 11 device to lock the device display after 15 minutes (or less) of inactivity.

On the EMM Console:
1. Open "Lock screen restrictions".
2. Select "Personal Profile".
3. Set "Max time to screen lock" to any number between 1 and 900. The units are in seconds, so 900 represents 15 minutes (15 * 60 seconds).

Check Contents

Review Google Android device configuration settings to determine if the mobile device has the screen lock timeout set to 15 minutes or less.

This validation procedure is performed on both the EMM Administration Console and the Android 11 device.

On the EMM Console:
1. Open "Lock screen restrictions".
2. Select "Personal Profile".
3. Verify that "Max time to screen lock" is set to any number between 1 and 900. Units are in seconds; therefore, 900 represents 15 minutes.

On the Android 11 device, do the following:
1. Open Settings >> Display.
2. Tap "Screen timeout".
3. Ensure the Screen timeout value is set from 1 to 900.

If the EMM console device policy is not set to 15 minutes or less for the screen lock timeout or on the Android 11 device, the device policy is not set to 15 minutes or less for the screen lock timeout, this is a finding.

Vulnerability Number

V-228577

Documentable

False

Rule Version

GOOG-11-000400

Severity Override Guidance

Review Google Android device configuration settings to determine if the mobile device has the screen lock timeout set to 15 minutes or less.

This validation procedure is performed on both the EMM Administration Console and the Android 11 device.

On the EMM Console:
1. Open "Lock screen restrictions".
2. Select "Personal Profile".
3. Verify that "Max time to screen lock" is set to any number between 1 and 900. Units are in seconds; therefore, 900 represents 15 minutes.

On the Android 11 device, do the following:
1. Open Settings >> Display.
2. Tap "Screen timeout".
3. Ensure the Screen timeout value is set from 1 to 900.

If the EMM console device policy is not set to 15 minutes or less for the screen lock timeout or on the Android 11 device, the device policy is not set to 15 minutes or less for the screen lock timeout, this is a finding.

Check Content Reference

M

Target Key

4228

Comments