Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The mobile device used for BYOAD must be NIAP validated.
Description
Discussion Text
Note: For a virtual mobile infrastructure (VMI) solution, both the client and server components must be NIAP compliant.
Nonapproved mobile devices may not include sufficient controls to protect work data, applications, and networks from malware or adversary attack.
Components must only approve devices listed on the NIAP product compliant list or products listed in evaluation at the following links respectively:
- https://www.niap-ccevs.org/Product/
- https://www.niap-ccevs.org/Product/PINE.cfm
Reference: DOD policy "Use of Non-Government Mobile Devices". 3.b.(1)i.
SFR ID: FMT_SMF_EXT.1.1 #47
Nonapproved mobile devices may not include sufficient controls to protect work data, applications, and networks from malware or adversary attack.
Components must only approve devices listed on the NIAP product compliant list or products listed in evaluation at the following links respectively:
- https://www.niap-ccevs.org/Product/
- https://www.niap-ccevs.org/Product/PINE.cfm
Reference: DOD policy "Use of Non-Government Mobile Devices". 3.b.(1)i.
SFR ID: FMT_SMF_EXT.1.1 #47
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.