| Checked | Name | Title |
|---|
| ☐ | SV-260061r948388_rule | The EMM system supporting the Google Android 14 BYOAD must be configured for autonomous monitoring, compliance, and validation to ensure security/configuration settings of mobile devices do not deviate from the approved configuration baseline. |
| ☐ | SV-260062r948391_rule | The EMM system supporting the Google Android 14 BYOAD must be configured to initiate autonomous monitoring, compliance, and validation prior to granting the Google Android 14 BYOAD access to DOD information and IT resources. |
| ☐ | SV-260063r948394_rule | The EMM system supporting the Google Android 14 BYOAD must be configured to detect if the Google Android 14 BYOAD native security controls are disabled. |
| ☐ | SV-260064r948397_rule | The EMM system supporting the Google Android 14 BYOAD must be configured to detect if known malicious applications, blocked, or prohibited applications are installed on the Google Android 14 BYOAD (DOD-managed segment only). |
| ☐ | SV-260065r948400_rule | The EMM detection/monitoring system must use continuous monitoring of enrolled Google Android 14 BYOAD. |
| ☐ | SV-260066r948403_rule | The Google Android 14 BYOAD must be configured to either disable access to DOD data and IT systems and user accounts or wipe the work profile if the EMM system detects that native security controls are disabled. |
| ☐ | SV-260067r948406_rule | The Google Android 14 BYOAD must be configured to either disable access to DOD data and IT systems and user accounts or wipe the work profile if the EMM system detects the Google Android 14 BYOAD device has known malicious, blocked, or prohibited applications, or configured to access nonapproved third-party applications stores in the work profile. |
| ☐ | SV-260068r948409_rule | The Google Android 14 BYOAD must be configured so that the work profile is removed if the device is no longer receiving security or software updates. |
| ☐ | SV-260069r948412_rule | The Google Android 14 BYOAD and DOD enterprise must be configured to limit access to only AO-approved, corporate-owned enterprise IT resources. |
| ☐ | SV-260070r948415_rule | The EMM system supporting the Google Android 14 BYOAD must be NIAP validated (included on the NIAP list of compliant products or products in evaluation) unless the DOD CIO has granted an Approved Exception to Policy (E2P). |
| ☐ | SV-260071r948418_rule | The User Agreement must include a description of what personal data and information is being monitored, collected, or managed by the EMM system or deployed agents or tools. |
| ☐ | SV-260072r948421_rule | The DOD Mobile Service Provider must not allow Google Android 14 BYOADs in facilities where personally owned mobile devices are prohibited. |
| ☐ | SV-260073r948424_rule | The Google Android 14 BYOAD must be configured to disable device cameras and/or microphones when brought into DOD facilities where mobile phone cameras and/or microphones are prohibited. |
| ☐ | SV-260074r948427_rule | The mobile device used for BYOAD must be NIAP validated. |
STIGQter: STIG Summary: