Microsoft Android 11 must allow the Administrator (EMM) to perform the following management function: Wipe Enterprise data.
An XCCDF Rule
Description
When a user's device is lost or stolen, it is useful to remotely wipe it as soon as possible to avoid loss of DOD sensitive information. The Administrator must have the capability to force a wipe on a lost or stolen device to reduce the risk of compromise of sensitive DOD data. This capability mitigates that risk. SFR ID: FMT_SMF_EXT.1.1 #28
- ID
- SV-255221r870833_rule
- Version
- MSFT-11-005400
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
To perform the wipe Enterprise of data function on a Microsoft Android 11 device (when required).
On the EMM console:
1. Open "Managed work profile specific policies".
2. Select "Remove work profile".