STIGQter STIGQter: STIG Summary: BlackBerry CylancePROTECT Mobile for UEM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Jan 2024:

CylancePROTECT Mobile must be configured to disable anonymous data collection by BlackBerry for both iOS and Android devices.

DISA Rule

SV-257272r918400_rule

Vulnerability Number

V-257272

Group Title

SRG-APP-000516-AS-000237

Rule Version

BBCP-00-013800

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Disable CylancePROTECT Mobile anonymous data collection by BlackBerry for both iOS and Android devices:

1. Log on to the BlackBerry UEM console.
2. In Policies and profiles >> Protection >> BlackBerry Protect, select and edit a BlackBerry Protect profile.
3. On the iOS tab, in the "Statistics collection" section, clear the "Allow collection of anonymized statistics from devices to improve the performance of BlackBerry Protect" check box.
4. On the Android tab, in the "Statistics collection" section, clear the "Allow collection of anonymized statistics from devices to improve the performance of BlackBerry Protect" check box.
5. Click "Save".

Check Contents

Verify anonymous data collection by BlackBerry for both iOS and Android devices has been disabled by CylancePROTECT Mobile:

1. Log on to the BlackBerry UEM console.
2. In Policies and profiles >> Protection >> BlackBerry Protect, select a BlackBerry Protect profile.
3. On the iOS tab, in the "Statistics collection" section, verify "Allow collection of anonymized statistics from devices to improve the performance of BlackBerry Protect" check box has not been selected.
4. On the Android tab, in the "Statistics collection" section, verify the "Allow collection of anonymized statistics from devices to improve the performance of BlackBerry Protect" check box has not been selected.

If CylancePROTECT Mobile has not disabled anonymous data collection by BlackBerry for both iOS and Android devices, this is a finding.

Vulnerability Number

V-257272

Documentable

False

Rule Version

BBCP-00-013800

Severity Override Guidance

Verify anonymous data collection by BlackBerry for both iOS and Android devices has been disabled by CylancePROTECT Mobile:

1. Log on to the BlackBerry UEM console.
2. In Policies and profiles >> Protection >> BlackBerry Protect, select a BlackBerry Protect profile.
3. On the iOS tab, in the "Statistics collection" section, verify "Allow collection of anonymized statistics from devices to improve the performance of BlackBerry Protect" check box has not been selected.
4. On the Android tab, in the "Statistics collection" section, verify the "Allow collection of anonymized statistics from devices to improve the performance of BlackBerry Protect" check box has not been selected.

If CylancePROTECT Mobile has not disabled anonymous data collection by BlackBerry for both iOS and Android devices, this is a finding.

Check Content Reference

M

Target Key

5544