STIGQter: STIG Summary: Google Android 15 COBO Security Technical Implementation Guide Version: 1 Release: 5 Benchmark Date: 13 May 2026:

Google Android 15 must implement the management setting: disable Camera.

DISA Rule

SV-276990r1134408_rule

Vulnerability Number

V-276990

Group Title

PP-MDF-993300

Rule Version

GOOG-15-013500

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

If the AO has not approved the use of Google device camera, configure Android 15 to disable the device camera.

On the MDM console:

COBO and COPE:

1. Open Camera.
2. Select "Disable camera".

Configuration API: cameraDisabled

Check Contents

Determine if the site AO has approved the use of device cameras. Look for a document showing approval for a specific user or group of users. If not approved, review configuration settings to confirm that "Allow Camera" is disabled. If approved, this requirement is not applicable. Review configuration settings to confirm that the device camera has been disabled.

This check procedure is performed on the device management tool and the Samsung Android 15 device.

On the MDM console:

COBO and COPE:

1. Open Camera.
2. Verify that the "Disable camera" setting is disabled.

On the managed Samsung Android 15 device:

COBO and COPE:

Verify that the camera cannot be used on the mobile device.

If the device camera has not been disabled, this is a finding.

Vulnerability Number

V-276990

Documentable

False

Rule Version

GOOG-15-013500

Severity Override Guidance

Determine if the site AO has approved the use of device cameras. Look for a document showing approval for a specific user or group of users. If not approved, review configuration settings to confirm that "Allow Camera" is disabled. If approved, this requirement is not applicable. Review configuration settings to confirm that the device camera has been disabled.

This check procedure is performed on the device management tool and the Samsung Android 15 device.

On the MDM console:

COBO and COPE:

1. Open Camera.
2. Verify that the "Disable camera" setting is disabled.

On the managed Samsung Android 15 device:

COBO and COPE:

Verify that the camera cannot be used on the mobile device.

If the device camera has not been disabled, this is a finding.

Check Content Reference

M

Target Key

5653