STIGQter: STIG Summary: Google Android 14 MDFPP 3.3 BYOAD Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Oct 2025:

Google Android 14 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the Work Profile.

DISA Rule

SV-260142r958390_rule

Vulnerability Number

V-260142

Group Title

PP-MDF-333160

Rule Version

GOOG-14-707700

Severity

CAT II

CCI(s)

• CCI-000048 - Display an organization-defined system use notification message or banner to users before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidelines.

Weight

10

Fix Recommendation

Configure the DOD warning banner by the following method (required text is found in the Vulnerability Discussion):

Place the DOD warning banner text in the user agreement signed by each Google Android 14 device user (preferred method).

Note: It is not possible for the EMM to force a warning banner be placed on the device screen when using "work profile for employee-owned devices (BYOD)" deployment mode.

Check Contents

The DOD warning banner can be displayed using the following method (required text is found in the Vulnerability Discussion):

Place the DOD warning banner text in the user agreement signed by each managed Android 14 device user (preferred method).

Note: It is not possible for the EMM to force a warning banner be placed on the device screen when using "work profile for employee-owned devices (BYOD)" deployment mode.

Review the signed user agreements for Google Android 14 device users and verify the agreement includes the required DOD warning banner text.

If the required warning banner text is not on all signed user agreements reviewed, this is a finding.

Vulnerability Number

V-260142

Documentable

False

Rule Version

GOOG-14-707700

Severity Override Guidance

The DOD warning banner can be displayed using the following method (required text is found in the Vulnerability Discussion):

Place the DOD warning banner text in the user agreement signed by each managed Android 14 device user (preferred method).

Note: It is not possible for the EMM to force a warning banner be placed on the device screen when using "work profile for employee-owned devices (BYOD)" deployment mode.

Review the signed user agreements for Google Android 14 device users and verify the agreement includes the required DOD warning banner text.

If the required warning banner text is not on all signed user agreements reviewed, this is a finding.

Check Content Reference

M

Target Key

5589