← Back to Google Android 17 COBO Security Technical Implementation Guide

V-284730

CAT I (High)

Android 17 devices must have the latest available Google Android 17 operating system installed.

Rule ID

SV-284730r1240484_rule

STIG

Google Android 17 COBO Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000366

Discussion

Required security features are not available in earlier operating system versions. In addition, there may be known vulnerabilities in earlier versions. SFR ID: FMT_SMF.1.1 #47

Check Content

Review device configuration settings to confirm the Google Android device has the most recently released version of managed Google Android 17 installed. 
 
This procedure is performed on both the EMM administration console and the managed Google Android 17 device.
 
On the EMM console, review the version of Google Android 17 installed on a sample of managed devices. This procedure will vary depending on the EMM product. 
 
On the managed Google Android 17 device, to determine the installed operating system version: 

COBO and COPE:

1. Open Settings.
2. Tap "About phone".
3. Verify "Build number".
 
If the installed version of the Google Android 17 operating system on any reviewed device is not the latest released by Google, this is a finding. 

Google's Android operating system patch website: https://source.android.com/security/bulletin/

Android versions for Pixel devices: https://developers.google.com/android/images

Fix Text

Install the latest released version of the Google Android 17 operating system on all managed Google devices.
 
Note: Google Android device operating system updates are released directly by Google or can be distributed via the EMM. Check each device manufacturer and/or carriers for current updates.