STIGQter: STIG Summary: Samsung Android 16 COBO Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 13 May 2026:

Samsung Android must be configured to not display the following (Work Environment) notifications when the device is locked: All notifications.

DISA Rule

SV-276558r1139196_rule

Vulnerability Number

V-276558

Group Title

PP-MDF-333080

Rule Version

KNOX-16-005800

Severity

CAT II

CCI(s)

• CCI-000060 - Conceal, via the device lock, information previously visible on the display with a publicly viewable image.

Weight

10

Fix Recommendation

Configure the Samsung Android devices to not display (Work Environment) notifications when the device is locked.

On the management tool, in the Work profile restrictions section, set "Unredacted Notifications" to "Disallow".

API: setKeyguardDisabledFeatures, KEYGUARD_DISABLE_UNREDACTED_NOTIFICATIONS

Check Contents

Review the configuration to determine if the Samsung Android devices are not displaying (Work Environment) notifications when the device is locked.

Notifications of incoming phone calls are acceptable even when the device is locked.

This validation procedure is performed on both the management tool Administration Console and the Samsung Android device.

On the management tool, in the Work profile restrictions section, verify "Unredacted Notifications" is set to "Disallow".

COPE:
On the Samsung Android device:
1. Open Settings >> Notifications >> Lock screen.
2. Verify configuration of "Sensitive work profile notifications" is disabled.

If on the management tool "Unredacted Notifications" is not set to "Disallow", or on the Samsung Android device "Sensitive work profile notifications" is not disabled, this is a finding.

COBO:
On the Samsung Android device:
1. Open Settings >> Notifications.
2. Verify "Lock screen" menu is disabled.

If on the management tool "Unredacted Notifications" is not set to "Disallow", or on the Samsung Android device "Notifications" menu is not disabled, this is a finding.

Vulnerability Number

V-276558

Documentable

False

Rule Version

KNOX-16-005800

Severity Override Guidance

Review the configuration to determine if the Samsung Android devices are not displaying (Work Environment) notifications when the device is locked.

Notifications of incoming phone calls are acceptable even when the device is locked.

This validation procedure is performed on both the management tool Administration Console and the Samsung Android device.

On the management tool, in the Work profile restrictions section, verify "Unredacted Notifications" is set to "Disallow".

COPE:
On the Samsung Android device:
1. Open Settings >> Notifications >> Lock screen.
2. Verify configuration of "Sensitive work profile notifications" is disabled.

If on the management tool "Unredacted Notifications" is not set to "Disallow", or on the Samsung Android device "Sensitive work profile notifications" is not disabled, this is a finding.

COBO:
On the Samsung Android device:
1. Open Settings >> Notifications.
2. Verify "Lock screen" menu is disabled.

If on the management tool "Unredacted Notifications" is not set to "Disallow", or on the Samsung Android device "Notifications" menu is not disabled, this is a finding.

Check Content Reference

M

Target Key

5714