STIGQter: STIG Summary: Samsung Android 16 COPE Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 13 May 2026:

The Samsung Android device work profile must be configured to disable automatic completion of work space internet browser text input.

DISA Rule

SV-276660r1139502_rule

Vulnerability Number

V-276660

Group Title

PP-MDF-993300

Rule Version

KNOX-16-010000

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Configure the Samsung device to disable the autofill functionality.

The required configuration is the default configuration when the device is enrolled. If the device configuration is changed, use the following procedure to bring the device back into compliance:

On the management tool:
1. Open the "Managed configurations" section.
2. Select the Chrome Browser version from the work profile.
3. Ensure "PasswordManagerEnabled" is turned "OFF".
4. Ensure "AutofillAddressEnabled" is turned "OFF".
5. Ensure "AutofillCreditCardEnabled" is turned "OFF".

API: setApplicationRestrictions

Check Contents

Review the work profile Chrome Browser app on the Samsung device autofill setting.

This validation procedure is performed on the management tool.

On the management tool:
1. Open "Managed Configurations" section.
2. Select the Chrome Browser version from the work profile.
3. Verify "PasswordManagerEnabled" is turned "OFF".
4. Verify "AutofillAddressEnabled" is turned "OFF".
5. Verify "AutofillCreditCardEnabled" is turned "OFF".

If on the management tool any of the browser autofill settings are set to "On" in the Chrome Browser Settings, this is a finding.

Vulnerability Number

V-276660

Documentable

False

Rule Version

KNOX-16-010000

Severity Override Guidance

Check Content Reference

Target Key

5715