Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
Google Android 13 BYOAD Security Technical Implementation Guide
PP-MDF-993300
The Google Android 13 work profile must be configured to prevent users from adding personal email accounts to the work email app.
The Google Android 13 work profile must be configured to prevent users from adding personal email accounts to the work email app.
An XCCDF Rule
Details
Profiles
Prose
The Google Android 13 work profile must be configured to prevent users from adding personal email accounts to the work email app.
Medium Severity
<VulnDiscussion>If the user can add a personal email account (POP3, IMAP, EAS) to the work email app, it could be used to forward sensitive DOD data to unauthorized recipients. Restricting email account addition to the administrator or restricting email account addition to allowlisted accounts mitigates this vulnerability. SFR ID: FMT_SMF_EXT.1.1 #47</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>