Skip to content

Samsung Android OS 13 with Knox 3.x COBO Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Samsung Android must be configured to prevent users from adding personal email accounts to the work email app.

    <VulnDiscussion>If the user is able to add a personal email account (POP3, IMAP, EAS) to the work email app, it could be used to forward sens...
    Rule Medium Severity
  • Samsung Android must be configured to enable encryption for data at rest on removable storage media or, alternately, the use of removable storage media must be disabled.

    <VulnDiscussion>The MOS must ensure the data being written to the mobile device's removable media is protected from unauthorized access. If d...
    Rule High Severity
  • PP-MDF-323230

    <GroupDescription></GroupDescription>
    Group
  • Samsung Android must be configured to disable USB mass storage mode.

    &lt;VulnDiscussion&gt;USB mass storage mode enables the transfer of data and software from one device to another. This software can include malware...
    Rule Medium Severity
  • PP-MDF-323240

    <GroupDescription></GroupDescription>
    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules