The EMM detection/monitoring system must use continuous monitoring of enrolled Samsung Android 14 BYOAD.

Severity	Group ID	Group Title	Version	Rule ID	Date	STIG Version
medium	V-260401	PP-BYO-000070	KNOX-14-800700	SV-260401r950714_rule	2024-02-16	1

Description
DOD policy requires BYOAD devices with DOD data be managed by a DOD MDM server, MAM server, or VMI system. This ensures the device can be monitored for compliance with the approved security baseline and the work profile can be removed when the device is out of compliance, which protects DOD data from unauthorized exposure. Continuous monitoring must be used to ensure all noncompliance events will be seen by the detection system. Reference: DOD policy "Use of Non-Government Mobile Devices" (3.a.(3)iii). SFR ID: FMT_SMF_EXT.1.1 #47

Description

DOD policy requires BYOAD devices with DOD data be managed by a DOD MDM server, MAM server, or VMI system. This ensures the device can be monitored for compliance with the approved security baseline and the work profile can be removed when the device is out of compliance, which protects DOD data from unauthorized exposure. Continuous monitoring must be used to ensure all noncompliance events will be seen by the detection system. Reference: DOD policy "Use of Non-Government Mobile Devices" (3.a.(3)iii). SFR ID: FMT_SMF_EXT.1.1 #47

ℹ️ Check
Verify the EMM detection/monitoring system is configured to use continuous monitoring of enrolled Samsung Android 14 BYOAD. The exact procedure will depend on the EMM system used at the site. If the EMM detection/monitoring system is not configured to use continuous monitoring of enrolled Samsung Android 14 BYOAD, this is a finding.

✔️ Fix
Configure the EMM detection/monitoring system to use continuous monitoring of enrolled Samsung Android 14 BYOAD. The exact procedure will depend on the EMM system used at the site.