STIGQter: STIG Summary: Mobile Device Policy Security Technical Implementation Guide (STIG) Version: 2 Release: 6 Benchmark Date: 26 Jul 2019:

Required procedures must be followed for the disposal of mobile devices.

DISA Rule

SV-30695r7_rule

Vulnerability Number

V-24958

Group Title

Follow procedures for disposal of mobile devices

Rule Version

WIR-SPP-004

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Follow required procedures prior to disposing of a mobile device or transitioning it to another user.

Check Contents

This requirement applies to mobile operating system (OS) mobile devices.

Prior to disposing of a mobile device (for example, if a mobile device is transferred to another DoD or government agency), follow the disposal procedures found in the mobile operating system STIG Supplemental document.

Interview the ISSO.

Verify proper procedures are being followed and the procedures are documented.

Check to see how retired, discarded, or transitioned mobile devices were disposed of during the previous 6 – 12 months and verify compliance with requirements.

If procedures are not documented or if documented, they were not followed, this is a finding.

Vulnerability Number

V-24958

Documentable

False

Rule Version

WIR-SPP-004

Severity Override Guidance

This requirement applies to mobile operating system (OS) mobile devices.

Prior to disposing of a mobile device (for example, if a mobile device is transferred to another DoD or government agency), follow the disposal procedures found in the mobile operating system STIG Supplemental document.

Interview the ISSO.

Verify proper procedures are being followed and the procedures are documented.

Check to see how retired, discarded, or transitioned mobile devices were disposed of during the previous 6 – 12 months and verify compliance with requirements.

If procedures are not documented or if documented, they were not followed, this is a finding.

Check Content Reference

M

Responsibility

System Administrator

Target Key

3521

Comments