← Back to Google Android 17 COBO Security Technical Implementation Guide

V-284744

CAT II (Medium)

The Google Android device must be configured to disable Cross-Device Handoff (also called "Continuity On").

Rule ID

SV-284744r1240617_rule

STIG

Google Android 17 COBO Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000366

Discussion

Cross-Device Handoff (also called "Continuity On") permits a user of an Android phone to transition user activities from one device to another. Handoff passes sufficient information between the devices to describe the activity, but app data synchronization associated with the activity is handled though the cloud, which should be disabled on a compliant Android devices. If a user associates both DoW and personal devices to the same Google account, the user may improperly reveal information about the nature of the user's activities on an unprotected device. Disabling Cross-Device Handoff mitigates this risk. SFR ID: FMT_SMF.1.1 #47

Check Content

Review device configuration settings to disable Cross-Device Handoff (also called "Continuity On"). 
 
This procedure is performed on the EMM console.

Verify "TASK_CONTINUITY_HANDOFF_DISABLED" is enabled.

If on the EMM console Cross-Device Handoff is not disabled, this is a finding.

Fix Text

Configure the Google Android 17 device to disable Cross-Device Handoff (also called "Continuity On").
 
On the EMM console:

COBO and COPE:

1. Open User Restrictions.
2. Enable "TASK_CONTINUITY_HANDOFF_DISABLED".

API: TASK_CONTINUITY_HANDOFF_DISABLED