STIGQter: STIG Summary: Google Android 10.x Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Jan 2020:

Google Android 10 must be provisioned as a fully managed device and configured to create a work profile.

DISA Rule

SV-108077r1_rule

Vulnerability Number

V-98973

Group Title

PP-MDF-991000

Rule Version

GOOG-10-009600

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure Google Android 10 in a Corporate Owned Work Managed configuration.

On the MDM console, configure the default enrollment as Corporate Owned Work Managed.

Refer to the MDM documentation to determine how to configure the device to enroll as Corporate Owned Work Managed.

Check Contents

Review that Google Android 10 is configured as Corporate Owned Work Managed.

This procedure is performed on both the MDM Administrator console and the Google Android 10 device.

On the MDM console, verify that the default enrollment is set to Corporate Owned Work Managed.

On the Google Android 10 device, do the following:
1. Go to the application drawer.
2. Ensure a Personal tab and a Work tab are present.

If on the MDM console the account the default enrollment is set to Corporate Owned Work Managed or on the Google Android 10 device the user does not see a Work tab, this is a finding.

Vulnerability Number

V-98973

Documentable

False

Rule Version

GOOG-10-009600

Severity Override Guidance

Review that Google Android 10 is configured as Corporate Owned Work Managed.

This procedure is performed on both the MDM Administrator console and the Google Android 10 device.

On the MDM console, verify that the default enrollment is set to Corporate Owned Work Managed.

On the Google Android 10 device, do the following:
1. Go to the application drawer.
2. Ensure a Personal tab and a Work tab are present.

If on the MDM console the account the default enrollment is set to Corporate Owned Work Managed or on the Google Android 10 device the user does not see a Work tab, this is a finding.

Check Content Reference

M

Target Key

3581

Comments