STIGQter STIGQter: STIG Summary: Google Android 14 COPE Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 13 May 2026:

Google Android 14 must be configured to enforce that Wi-Fi Sharing is disabled.

DISA Rule

SV-258430r959010_rule

Vulnerability Number

V-258430

Group Title

PP-MDF-993300

Rule Version

GOOG-14-009900

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the Google Android 14 device to disable Wi-Fi Sharing.

Mobile Hotspot must be enabled to enable Wi-Fi Sharing. If the AO has not approved Mobile Hotspot, and it has been disabled on the EMM console, no further action is needed.

If Mobile Hotspot is being used, use the following procedure to disable Wi-Fi Sharing:

On the EMM console:

COBO:

1. Open "Set user restrictions".
2. Toggle "Disallow config tethering" to "ON".

COPE:

1. Open "Set user restrictions on parent".
2. Toggle "Disallow config tethering" to "ON".

Check Contents

Review device configuration settings to confirm Wi-Fi Sharing is disabled.

Mobile Hotspot must be enabled to enable Wi-Fi Sharing. If the Authorizing Official (AO) has not approved Mobile Hotspot, and it has been verified as disabled on the EMM console, no further action is needed.

If Mobile Hotspot is being used, use the following procedure to verify Wi-Fi Sharing is disabled:

On the EMM console:

COBO:

1. Open "Set user restrictions".
2. Verify "Disallow config tethering" is toggled to "ON".

COPE:

1. Open "Set user restrictions on parent".
2. Toggle "Disallow config tethering" to "ON".

On the managed Google Android 14 device:

COBO and COPE:

1. Go to Settings >> Network & Internet.
2. Verify "Hotspot & tethering" is "Controlled by admin".
3. Verify that tapping "Hotspot & tethering" provides a prompt to the user specifying "Action not allowed".

If on the managed Google Android 14 device "Hotspot & tethering" is enabled, this is a finding.

Vulnerability Number

V-258430

Documentable

False

Rule Version

GOOG-14-009900

Severity Override Guidance

Review device configuration settings to confirm Wi-Fi Sharing is disabled.

Mobile Hotspot must be enabled to enable Wi-Fi Sharing. If the Authorizing Official (AO) has not approved Mobile Hotspot, and it has been verified as disabled on the EMM console, no further action is needed.

If Mobile Hotspot is being used, use the following procedure to verify Wi-Fi Sharing is disabled:

On the EMM console:

COBO:

1. Open "Set user restrictions".
2. Verify "Disallow config tethering" is toggled to "ON".

COPE:

1. Open "Set user restrictions on parent".
2. Toggle "Disallow config tethering" to "ON".

On the managed Google Android 14 device:

COBO and COPE:

1. Go to Settings >> Network & Internet.
2. Verify "Hotspot & tethering" is "Controlled by admin".
3. Verify that tapping "Hotspot & tethering" provides a prompt to the user specifying "Action not allowed".

If on the managed Google Android 14 device "Hotspot & tethering" is enabled, this is a finding.

Check Content Reference

M

Target Key

5555