STIGQter: STIG Summary: Google Android 16 COBO Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 13 May 2026:

Google Android 16 must be configured to lock the display after 15 minutes (or less) of inactivity.

DISA Rule

SV-276751r1140045_rule

Vulnerability Number

V-276751

Group Title

PP-MDF-333030

Rule Version

GOOG-16-006300

Severity

CAT II

CCI(s)

• CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Configure the Google Android 16 device to enable a screen-lock policy of 15 minutes for the max period of inactivity.

Note: The Google Android 16 Settings UI does not support the 15-minute increment, but this value can be set by the MDM.

On the EMM console:

COBO:

1. Open "Lock screen restrictions".
2. Set "Max time to screen lock" to "900".
Note: The units are in seconds.

COPE:

1. Open "Lock screen restrictions".
2. Select "Personal Profile".
3. Set "Max time to screen lock" to "900".
Note: The units are in seconds.

Configuration API: setMaximumTimeToLock

Check Contents

Review managed Google Android device configuration settings to determine if the mobile device is enforcing a screen-lock policy that will lock the display after a period of 15 minutes or less of inactivity.

Note: The Google Android 16 Settings user interface (UI) does not support the 15-minute increment, but this value can be set by the MDM.

This validation procedure is performed on the EMM Administration Console.

On the EMM console:

COBO:

1. Open "Lock screen restrictions".
2. Verify that "Max time to screen lock" is set to "900".
Note: The units are in seconds.

COPE:

1. Open "Lock screen restrictions".
2. Select "Personal Profile".
3. Verify that "Max time to screen lock" is set to "900".
Note: The units are in seconds.

If the EMM console device policy is not set to enable a screen-lock policy that will lock the display after a period of inactivity of 900 seconds, this is a finding.

Vulnerability Number

V-276751

Documentable

False

Rule Version

GOOG-16-006300

Severity Override Guidance

Review managed Google Android device configuration settings to determine if the mobile device is enforcing a screen-lock policy that will lock the display after a period of 15 minutes or less of inactivity.

Note: The Google Android 16 Settings user interface (UI) does not support the 15-minute increment, but this value can be set by the MDM.

This validation procedure is performed on the EMM Administration Console.

On the EMM console:

COBO:

1. Open "Lock screen restrictions".
2. Verify that "Max time to screen lock" is set to "900".
Note: The units are in seconds.

COPE:

1. Open "Lock screen restrictions".
2. Select "Personal Profile".
3. Verify that "Max time to screen lock" is set to "900".
Note: The units are in seconds.

If the EMM console device policy is not set to enable a screen-lock policy that will lock the display after a period of inactivity of 900 seconds, this is a finding.

Check Content Reference

M

Target Key

5716