STIGQter STIGQter: STIG Summary: Google Android 14 MDFPP 3.3 BYOAD Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Oct 2025:

Google Android 14 must be provisioned as a BYOAD device (Android work profile for employee-owned devices [BYOD]).

DISA Rule

SV-260165r959010_rule

Vulnerability Number

V-260165

Group Title

PP-MDF-993300

Rule Version

GOOG-14-710300

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the Google Android 14 device for BYOD (work profile for employee-owned devices [BYOD]).

On the EMM console, configure the default enrollment as work profile for employee-owned devices (BYOD).

Refer to the EMM documentation to determine how to configure the device.

Check Contents

Review that managed Google Android 14 is configured for BYOD (work profile for employee-owned devices [BYOD]).

This procedure is performed on both the EMM Administrator console and the managed Google Android 14 device.

On the EMM console, configure the default enrollment as work profile for employee-owned devices (BYOD).

On the managed Google Android 14 device:

1. Go to the application drawer.
2. Ensure a Personal tab and a Work tab are present.

If on the EMM console, the default enrollment is not set for BYOD (work profile for employee-owned devices [BYOD]), or if on the managed Android 14 device, the user does not have a Work tab, this is a finding.

Vulnerability Number

V-260165

Documentable

False

Rule Version

GOOG-14-710300

Severity Override Guidance

Review that managed Google Android 14 is configured for BYOD (work profile for employee-owned devices [BYOD]).

This procedure is performed on both the EMM Administrator console and the managed Google Android 14 device.

On the EMM console, configure the default enrollment as work profile for employee-owned devices (BYOD).

On the managed Google Android 14 device:

1. Go to the application drawer.
2. Ensure a Personal tab and a Work tab are present.

If on the EMM console, the default enrollment is not set for BYOD (work profile for employee-owned devices [BYOD]), or if on the managed Android 14 device, the user does not have a Work tab, this is a finding.

Check Content Reference

M

Target Key

5589