STIGQter: STIG Summary: Google Android 16 COBO Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 13 May 2026:

Google Android 16 must be configured to disable all data signaling over [assignment: list of externally accessible hardware ports (for example, USB)].

DISA Rule

SV-276780r1140132_rule

Vulnerability Number

V-276780

Group Title

PP-MDF-993300

Rule Version

GOOG-16-012200

Severity

CAT II

CCI(s)

• CCI-002235 - Prevent non-privileged users from executing privileged functions.

Weight

10

Fix Recommendation

Configure the Google Android 16 device to disable the USB port (except for charging the device).

On the EMM console:

COBO and COPE:

1. Open "Set user restrictions".
2. Toggle "Disallow USB file transfer" to "ON".

Configuration API: DISALLOW_USB_FILE_TRANSFER

Check Contents

Review the device configuration to confirm that the USB port is disabled except for charging the device.

On the EMM console:

COBO and COPE:

1. Open "Set user restrictions".
2. Verify that "Disallow USB file transfer" is set to "ON".

If on the EMM console the USB port is not disabled ("Disallow USB file transfer" is set to "ON"), this is a finding.

Vulnerability Number

V-276780

Documentable

False

Rule Version

GOOG-16-012200

Severity Override Guidance

Review the device configuration to confirm that the USB port is disabled except for charging the device.

On the EMM console:

COBO and COPE:

1. Open "Set user restrictions".
2. Verify that "Disallow USB file transfer" is set to "ON".

If on the EMM console the USB port is not disabled ("Disallow USB file transfer" is set to "ON"), this is a finding.

Check Content Reference

M

Target Key

5716