STIGQter: STIG Summary: Samsung Android 16 COBO Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 13 May 2026:

Samsung Android must be configured to not allow backup of all applications and configuration data to remote systems. - Disable Backup Services.

DISA Rule

SV-276625r1139397_rule

Vulnerability Number

V-276625

Group Title

PP-MDF-333250

Rule Version

KNOX-16-007500

Severity

CAT II

CCI(s)

CCI-001090 - Prevent unauthorized and unintended information transfer via shared system resources.

Weight

Fix Recommendation

Configure the Samsung Android devices to disable backup to remote systems (including commercial clouds).

On the management tool, in the device restrictions, set "Backup service" to "Disable".

API: setBackupServiceEnabled

Check Contents

Review the configuration to determine if the Samsung Android devices are disabling backup to remote systems (including commercial clouds).

This validation procedure is performed on both the management tool and the Samsung Android device.

On the management tool, in the device restrictions section, verify "Backup service" is set to "Disable".

On the Samsung Android device:
1. Open Settings >> Accounts and backup.
2. Verify any backup service listed cannot be configured to back up data.

If on the management tool "Backup service" is not set to "Disable", or on the Samsung Android device a listed backup service can be configured to back up data, this is a finding.

Vulnerability Number

V-276625

Documentable

False

Rule Version

KNOX-16-007500

Severity Override Guidance

Check Content Reference

Target Key

5714