STIGQter: STIG Summary: Google Android 16 COPE Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 13 May 2026:

Google Android 16 must be provisioned as a fully managed device and configured to create a work profile.

DISA Rule

SV-276878r1140426_rule

Vulnerability Number

V-276878

Group Title

PP-MDF-993300

Rule Version

GOOG-16-010300

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Configure the Google Android 16 device as corporate owned with a work profile.

On the EMM console, configure the default enrollment as Corporate Owned, and select "Use for Work & Personal".

Refer to the EMM documentation to determine how to configure the device.

Check Contents

Verify that managed Google Android 16 is configured as Corporate Owned Work Managed.

This procedure is performed on both the EMM Administration Console and the managed Google Android 16 device.

On the EMM console, configure the default enrollment as Corporate Owned and select "Use for Work & Personal".

On the managed Google Android 16 device:

1. Go to the application drawer.
2. Ensure a Personal tab and a Work tab are present.

If on the EMM console the account the default enrollment is set to Corporate Owned Work Managed, or on the managed Android 16 device the user does not have a Work tab, this is a finding.

Vulnerability Number

V-276878

Documentable

False

Rule Version

GOOG-16-010300

Severity Override Guidance

Check Content Reference

Target Key

5717