Skip to content

Microsoft Android 11 COPE Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • PP-MDF-301170

    Group
  • Microsoft Android 11 must be configured to disable developer modes.

    Developer modes expose features of the Microsoft Android device that are not available during standard operation. An adversary may leverage a vulnerability inherent in a developer mode to compromis...
    Rule Medium Severity
  • PP-MDF-301200

    Group
  • Microsoft Android 11 must be configured to display the DOD advisory warning message at start-up or each time the user unlocks the device.

    The Microsoft Android 11 is required to display the DOD-approved system use notification message or banner before granting access to the system that provides privacy and security notices consistent...
    Rule Low Severity
  • PP-MDF-301210

    Group
  • Microsoft Android 11 must be configured to disable USB mass storage mode.

    USB mass storage mode enables the transfer of data and software from one device to another. This software can include malware. When USB mass storage is enabled on a mobile device, it becomes a pote...
    Rule Medium Severity
  • PP-MDF-301220

    Group
  • PP-MDF-301230

    Group
  • Microsoft Android 11 must be configured to not allow backup of all applications and configuration data to remote systems.

    Backups to remote systems (including cloud backup) can leave data vulnerable to breach on the external systems, which often offer less protection than the Microsoft Android device. Where the remote...
    Rule Medium Severity
  • PP-MDF-301260

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules