STIGQter: STIG Summary: Google Android 16 COBO Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 13 May 2026:

Android 16 devices must be configured to disable the use of third-party keyboards.

DISA Rule

SV-276778r1140126_rule

Vulnerability Number

V-276778

Group Title

PP-MDF-993300

Rule Version

GOOG-16-010900

Severity

CAT III

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure the Google Android 16 device to disallow the use of third-party keyboards.

On the EMM console:

COBO and COPE:

1. Open "Input methods".
2. Tap "Set input methods".
3. Select only the approved keyboard.

Admins can also configure application allowlists for Google Play that do not have any third-party keyboards for user installation.

Check Contents

Review the managed Google Android 16 configuration settings to confirm that no third-party keyboards are enabled.

This procedure is performed on the EMM Administration Console.

On the EMM console:

COBO and COPE:

1. Open "Input methods".
2. Tap "Set input methods".
3. Verify that only the approved keyboards are selected.

If third-party keyboards are allowed, this is a finding.

Vulnerability Number

V-276778

Documentable

False

Rule Version

GOOG-16-010900

Severity Override Guidance

Review the managed Google Android 16 configuration settings to confirm that no third-party keyboards are enabled.

This procedure is performed on the EMM Administration Console.

On the EMM console:

COBO and COPE:

1. Open "Input methods".
2. Tap "Set input methods".
3. Verify that only the approved keyboards are selected.

If third-party keyboards are allowed, this is a finding.

Check Content Reference

M

Target Key

5716