STIGQter STIGQter: STIG Summary: Google Android 16 COBO Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 13 May 2026:

Google Android 16 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

DISA Rule

SV-276763r1140081_rule

Vulnerability Number

V-276763

Group Title

PP-MDF-333240

Rule Version

GOOG-16-008500

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the Google Android 16 device to disable backup to locally connected systems.

On the EMM console:

COBO and COPE:

1. Open "Device owner management".
2. Toggle "Enable backup service" to "OFF".

Configuration API: DISALLOW_MOUNT_PHYSICAL_MEDIA, DISALLOW_USB_FILE_TRANSFER

Check Contents

Review managed Google Android 16 device configuration settings to determine if the capability to back up to a locally connected system has been disabled.

This validation procedure is performed on both the EMM Administration Console and the managed Google Android 16 device.

On the EMM console:

COBO and COPE:

1. Open "Device owner management".
2. Verify that "Enable backup service" is toggled to "OFF".

On the managed Google Android 16 device:

COBO:

1. Go to Settings >> System >> Backup.
2. Verify that Backup settings is "Not available".

COPE:

1. Go to Settings >> System >> Backup.
2. Select "Work".
3. Verify that Backup settings is "Not available".

If the EMM console device policy is not set to disable the capability to back up to a locally connected system, or on the managed Google Android 16 device the device policy is not set to disable the capability to back up to a locally connected system, this is a finding.

Vulnerability Number

V-276763

Documentable

False

Rule Version

GOOG-16-008500

Severity Override Guidance

Review managed Google Android 16 device configuration settings to determine if the capability to back up to a locally connected system has been disabled.

This validation procedure is performed on both the EMM Administration Console and the managed Google Android 16 device.

On the EMM console:

COBO and COPE:

1. Open "Device owner management".
2. Verify that "Enable backup service" is toggled to "OFF".

On the managed Google Android 16 device:

COBO:

1. Go to Settings >> System >> Backup.
2. Verify that Backup settings is "Not available".

COPE:

1. Go to Settings >> System >> Backup.
2. Select "Work".
3. Verify that Backup settings is "Not available".

If the EMM console device policy is not set to disable the capability to back up to a locally connected system, or on the managed Google Android 16 device the device policy is not set to disable the capability to back up to a locally connected system, this is a finding.

Check Content Reference

M

Target Key

5716