STIGQter STIGQter: STIG Summary: Google Android 11 COPE Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 11 Sept 2020:

Google Android 11 must be provisioned as a fully managed device and configured to create a work profile.

DISA Rule

SV-228632r505895_rule

Vulnerability Number

V-228632

Group Title

PP-MDF-991000

Rule Version

GOOG-11-009600

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure Google Android 11 device as corporate owned with a work profile.

On the EMM console, configure the default enrollment as Corporate Owned, and select "Use for Work & Personal".

Refer to the EMM documentation to determine how to configure the device.

Check Contents

Review that Google Android 11 is configured as Corporate Owned Work Managed.

This procedure is performed on both the EMM Administrator console and the Google Android 11 device.

On the EMM console, configure the default enrollment as Corporate Owned, and select "Use for Work & Personal".

On the Google Android 11 device, do the following:
1. Go to the application drawer.
2. Ensure a Personal tab and a Work tab are present.

If on the EMM console the account the default enrollment is set to Corporate Owned Work Managed or on the Google Android 11 device the user does not see a Work tab, this is a finding.

Vulnerability Number

V-228632

Documentable

False

Rule Version

GOOG-11-009600

Severity Override Guidance

Review that Google Android 11 is configured as Corporate Owned Work Managed.

This procedure is performed on both the EMM Administrator console and the Google Android 11 device.

On the EMM console, configure the default enrollment as Corporate Owned, and select "Use for Work & Personal".

On the Google Android 11 device, do the following:
1. Go to the application drawer.
2. Ensure a Personal tab and a Work tab are present.

If on the EMM console the account the default enrollment is set to Corporate Owned Work Managed or on the Google Android 11 device the user does not see a Work tab, this is a finding.

Check Content Reference

M

Target Key

4229

Comments