Skip to content

Samsung Android OS 14 with Knox 3.x COPE Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • PP-MDF-993300

    Group
  • Samsung Android must be enrolled as a COPE device.

    The Work profile is the designated application group for the COPE use case. SFR ID: FMT_MOF_EXT.1.2 #47
    Rule Medium Severity
  • PP-MDF-333160

    Group
  • Samsung Android must be configured to display the DOD advisory warning message at startup or each time the user unlocks the device.

    Before granting access to the system, the mobile operating system is required to display the DOD-approved system use notification message or banner that provides privacy and security notices consis...
    Rule Low Severity
  • PP-MDF-333025

    Group
  • PP-MDF-333024

    Group
  • Samsung Android must be configured to enforce a minimum password length of six characters.

    Password strength is a measure of the effectiveness of a password in resisting guessing and brute force attacks. The ability to crack a password is a function of how many attempts an adversary is p...
    Rule Medium Severity
  • PP-MDF-333040

    Group
  • PP-MDF-333030

    Group
  • Samsung Android must be configured to lock the display after 15 minutes (or less) of inactivity.

    The screen lock timeout must be set to a value that helps protect the device from unauthorized access. Having a too-long timeout would increase the window of opportunity for adversaries who gain ph...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules