Android 15 STIG Checklist

16 items · Security · Hard difficulty · 4 hours

Implement Android 15 STIG controls for corporate devices with this step-by-step checklist.

• Download Android 15 STIG XCCDF and supplemental documents

  Obtain official STIG and supplemental PDFs from DISA or public.cyber.mil.

• Identify COPE and COBO devices in your inventory

  Tag devices by ownership and intended use to apply correct policies.

• Decide enrollment method and recommend zero-touch for corporate devices

  Prefer zero-touch for bulk COPE/COBO deployments to ensure consistent configuration.

• Enroll corporate devices via zero-touch enrollment

  Use zero-touch to provision devices with your EMM and baseline policies.

• Set up zero-touch service account

  Create and configure the admin account for zero-touch enrollment.

• Upload device list to zero-touch console

  Provide IMEIs/serials or order IDs to bind devices to your account.

• Assign EMM/management profile to devices

  Map devices to your EMM and assign appropriate corporate profiles.

• Enable Android Enterprise work profile for COPE devices

  Activate native AE work profile for data separation on COPE devices.

• Verify NIAP-certified data separation is active

  Confirm the work profile is NIAP-certified and enforces separation.

• Configure personal space restrictions per AO approval

  Apply restrictions only where Authorizing Official approval requires limits.

• Implement configuration profiles and user-based enforcement (UBE)

  Create and deploy STIG-required profiles and attach UBE where specified.

• Enforce Wi-Fi network compliance with Network Infrastructure STIG

  Ensure Wi‑Fi APs and bridges comply and are not directly on enclave networks.

• Restrict unmanaged app installs when AO denies personal apps

  Block or limit sideloading and app installs to prevent data exposure.

• Test device compliance reporting and generate baseline report

  Run scans/reports to verify STIG controls and capture a baseline.

• Document AO approvals, user privacy guidance, and deployment procedures

  Record AO decisions, user policy, and deployment runbooks for audits.

• Schedule periodic STIG reviews and update tracking

  Track DISA change history and plan regular reviews for STIG updates.

Printed from TickYouOff — the interactive version tracks your progress and can be shared with others.