V-288458

Discussion

Wi-Fi Aware allows direct connections between nearby devices for fast data transfer, video streaming, and multiplayer gaming. It allows full peer-to-peer device discovery and communication where two or more devices are publishing and/or subscribing to the same known service name. There is risk that sensitive DoW information could be transferred from a DoW mobile device to a non-DoW device or from Work Profile apps on a DoW device to Personal Profile apps on a non-DoW device. SFR ID: FMT_SMF_EXT.1.1 #47

Check Content

Confirm required Wi-Fi Aware procedures have been implemented.

1. Verify site personal that have site-managed iPhones and iPads have completed required training (AIOS-27-011100).

2. Verify the site reviewed all managed iOS/iPadOS apps installed on site-managed iPhones and iPads for Wi-Fi Aware support and removed all apps that support Wi-Fi Aware. Discuss with the information system security officer (ISSO)/information system security manager (ISSM). If the site also manages the deployment of unmanaged apps on site-managed iPhones and iPads, verify unmanaged apps were also reviewed.

3. Review site app vetting procedures and verify they include review of Wi-Fi Aware capabilities in all apps. Verify apps with Wi-Fi Aware capability are disapproved for use.
 
If the site has not reviewed current managed apps for Wi-Fi Aware capabilities or did not remove Wi-Fi Aware-capable apps, this is a finding.

If the site app vetting procedures do not include a review of Wi-Fi Aware capabilities in all apps or disapprove apps with Wi-Fi Aware capability, this is a finding.