STIGQter STIGQter: STIG Summary: Google Android 14 COPE Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 13 May 2026:

Google Android 14 must allow only the administrator (MDM) to perform the following management function: Disable Phone Hub.

DISA Rule

SV-258443r959010_rule

Vulnerability Number

V-258443

Group Title

PP-MDF-993300

Rule Version

GOOG-14-012400

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Configure Google Android 14 device to disable the nearby notification streaming policy to disable Phone Hub.

COPE and COBO:

On the EMM console:
1. Open "Nearby notification streaming policy".
2. Set "Nearby notification streaming policy" to "Disabled".
3. Open "Nearby app streaming policy".
4. Set "Nearby app streaming policy" to "Disabled".

Check Contents

Review the EMM configuration to confirm phone hub has been disabled.

On the management tool:
1. Open "Nearby notification streaming policy".
2. Verify "Nearby notification streaming policy" is set to "Disabled".
3. Open "Nearby app streaming policy".
4. Verify "Nearby app streaming policy" is set to "Disabled".

If on the management tool the "Nearby Streaming Policy" is not set to "Disabled" and "Nearby app streaming policy" is not set to "Disabled", this is a finding.

Note: From a Chromebook, if a device is connected to the Phone Hub, try to set up the Notifications and it will fail to connect to the device to complete the set up if phone hub has been disabled on the DOD Android device.

Vulnerability Number

V-258443

Documentable

False

Rule Version

GOOG-14-012400

Severity Override Guidance

Review the EMM configuration to confirm phone hub has been disabled.

On the management tool:
1. Open "Nearby notification streaming policy".
2. Verify "Nearby notification streaming policy" is set to "Disabled".
3. Open "Nearby app streaming policy".
4. Verify "Nearby app streaming policy" is set to "Disabled".

If on the management tool the "Nearby Streaming Policy" is not set to "Disabled" and "Nearby app streaming policy" is not set to "Disabled", this is a finding.

Note: From a Chromebook, if a device is connected to the Phone Hub, try to set up the Notifications and it will fail to connect to the device to complete the set up if phone hub has been disabled on the DOD Android device.

Check Content Reference

M

Target Key

5555