MDM-03—Configuration Management: Mobile Devices

>Control Description

Organization Mobile devices (i.e., laptops, smartphones, tablets) are configured to ensure unnecessary hardware capabilities and functionalities are disabled, and management defined security features are enabled.

Theme

Technology

Type

Preventive

Policy/Standard

Mobile Device Policy

>Implementation Guidance

1. Ensure that mobile devices are configured to ensure unnecessary hardware capabilities and functionalities are disabled. 2. Ensure security features defined by the management shall be enabled within the MDM tool.

>Testing Procedure

1. Review the Mobile Device Management (MDM) tool and confirm that there is a policy implemented that restricts the use of unnecessary hardware capabilities and functionalities are disabled. 2. For a sample of mobile devices, verify security features are enabled in the MDM tool. 3 Review a sample of user devices and verify that the end user cannot use hardware capabilities and functionalities that have been disabled by the MDM tool per its policy and that these functionalities are not able to be re-activated by the end user.