| Checked | Name | Title |
|---|
| ☐ | SV-267430r1031475_rule | Google Android 15 must be configured to enable audit logging. |
| ☐ | SV-267431r1031478_rule | Google Android 15 must be configured to enforce a minimum password length of six characters. |
| ☐ | SV-267432r1031481_rule | Google Android 15 must be configured to not allow passwords that include more than four repeating or sequential characters. |
| ☐ | SV-267433r1031484_rule | Google Android 15 must be configured to lock the display after 15 minutes (or less) of inactivity. |
| ☐ | SV-267434r1033027_rule | Google Android 15 must be configured to not allow more than 10 consecutive failed authentication attempts. |
| ☐ | SV-267435r1031490_rule | Google Android 15 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DOD-approved commercial app repository, MDM server, mobile application store]. |
| ☐ | SV-267436r1033112_rule | Google Android 15 must be configured to enforce an application installation policy by specifying an application allow list that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version]. |
| ☐ | SV-267437r1134411_rule | Google Android 15 allowlist must be configured to not include applications with the following characteristics:
- Backs up mobile device (MD) data to non-DOD cloud servers (including user and application access to cloud backup services);
- Transmits MD diagnostic data to non-DOD servers;
- Voice assistant application if available when MD is locked;
- Voice dialing application if available when MD is locked;
- Allows synchronization of data or applications between devices associated with user;
- Payment processing;
- Allows unencrypted (or encrypted but not FIPS 140-2/140-3 validated) data sharing with other MDs or printers;
- Backs up own data to a remote system;
- Renders TV shows and movies. |
| ☐ | SV-267438r1042520_rule | Google Android 15 allow list must be configured to not include artificial intelligence (AI) applications that process device data in the cloud, including Google Gemini. |
| ☐ | SV-267439r1031502_rule | Google Android 15 must be configured to not display the following (work profile) notifications when the device is locked: [selection:
a. email notifications
b. calendar appointments
c. contact associated with phone call notification
d. text message notification
e. other application-based notifications
f. all notifications]. |
| ☐ | SV-267440r1031505_rule | Google Android 15 must be configured to disable trust agents. |
| ☐ | SV-267441r1033036_rule | Google Android 15 must be configured to disable developer modes. |
| ☐ | SV-267442r1031511_rule | Google Android 15 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the device. |
| ☐ | SV-267443r1031514_rule | Google Android 15 must be configured to generate audit records for the following auditable events: Detected integrity violations. |
| ☐ | SV-267444r1031517_rule | Google Android 15 must be configured to disable USB mass storage mode. |
| ☐ | SV-267445r1137817_rule | Google Android 15 must be configured to not allow backup of [all applications, configuration data] to locally connected systems. |
| ☐ | SV-267446r1137819_rule | Google Android 15 must be configured to not allow backup of [all applications, configuration data] to remote systems. |
| ☐ | SV-267447r1033115_rule | Google Android 15 must be configured to enable authentication of personal hotspot connections to the device using a preshared key. |
| ☐ | SV-267448r1033039_rule | Google Android 15 must be configured to disable multiuser modes. |
| ☐ | SV-267449r1031532_rule | Google Android 15 must be configured to disable all Bluetooth profiles except for HSP (Headset Profile), HFP (Hands-Free Profile), SPP (Serial Port Profile), A2DP (Advanced Audio Distribution Profile), AVRCP (Audio/Video Remote Control Profile), and PBAP (Phone Book Access Profile). |
| ☐ | SV-267450r1042523_rule | Google Android 15 must be configured to disable ad hoc wireless client-to-client connection capability. |
| ☐ | SV-267451r1033041_rule | Google Android 15 users must complete required training. |
| ☐ | SV-267452r1031541_rule | Google Android 15 must be configured to disable Wi-Fi Sharing. |
| ☐ | SV-267453r1031544_rule | Google Android 15 must be configured to enforce a password for Wi-Fi and Bluetooth hotspot, if approved for use by the approving authority (AO). If not approved for use, Wi-Fi and Bluetooth hotspot must be disabled. |
| ☐ | SV-267454r1031547_rule | Google Android 15 must have the DOD root and intermediate PKI certificates installed. |
| ☐ | SV-267455r1033044_rule | The Google Android 15 work profile must be configured to enforce the system application disable list. |
| ☐ | SV-267456r1031553_rule | The Google Android 15 work profile must be configured to disable automatic completion of workspace internet browser text input. |
| ☐ | SV-267457r1031556_rule | The Google Android 15 work profile must be configured to disable the autofill services. |
| ☐ | SV-267458r1031559_rule | Google Android 15 must be configured to disallow configuration of date and time. |
| ☐ | SV-267459r1031562_rule | Android 15 devices must have the latest available Google Android 15 operating system installed. |
| ☐ | SV-267460r1033046_rule | Android 15 devices must be configured to disable the use of third-party keyboards. |
| ☐ | SV-267461r1031568_rule | Android 15 devices must be configured to enable Common Criteria Mode (CC Mode). |
| ☐ | SV-267462r1033049_rule | Google Android 15 must be configured to disable all data signaling over [assignment: list of externally accessible hardware ports (for example, USB)]. |
| ☐ | SV-267463r1033052_rule | The Google Android 15 must allow only the administrator (EMM) to install/remove DOD root and intermediate PKI certificates. |
| ☐ | SV-267464r1033054_rule | Google Android 15 must allow only the administrator (MDM) to perform the following management function: Disable Phone Hub. |
| ☐ | SV-269100r1033116_rule | Google Android 15 must be configured to disable "Private Space" use. |
| ☐ | SV-276985r1183783_rule | Google Android 15 must disable the user's ability to wipe the device. |
| ☐ | SV-276987r1134399_rule | Google Android 15 must disable wireless printing. |
| ☐ | SV-276988r1134402_rule | Google Android 15 must disable screen capture. |
| ☐ | SV-276989r1134405_rule | Google Android 15 devices must have a Mobile Threat Detection (MTD) app installed. |
| ☐ | SV-276990r1134408_rule | Google Android 15 must implement the management setting: disable Camera. |
| ☐ | SV-278365r1134574_rule | The Google Android device must be configured to disable Wi-Fi Aware for Work Profile apps. |
STIGQter: STIG Summary: