V-252867

Discussion

If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DoD information systems. An adversary could exploit vulnerabilities created by the weaker configuration to compromise DoD sensitive information. SFR ID: FMT_MOF_EXT.1.2 #22

Check Content

Review Zebra Android device configuration settings to determine if the mobile device has location services on/off.

This validation procedure is performed on both the EMM Administration Console and the Android 11 device. 

On the EMM console, do the following:
1. Open "Set user restrictions on parent".
2. Verify that "Disallow config location" is toggled to "On".
3. Verify that "Disallow share location" is toggled to "On".

On the Zebra device, do the following:
1. Open Settings >> Location.
2. Validate that Location Services is "off" for Work.

If the mobile device has location services enabled, this is a finding.