STIGUI
V-260165CAT II — Medium severitySV-260165r959010_rule

Google Android 14 must be provisioned as a BYOAD device (Android work profile for employee-owned devices [BYOD]).

Rule version GOOG-14-710300 · STIG v1 · 2025-08-19

Discussion

The Android work profile for employee-owned devices (BYOD) is the designated application group for the BYOAD use case.

SFR ID: FMT_SMF_EXT.1.1 #47

Check

Review that managed Google Android 14 is configured for BYOD (work profile for employee-owned devices [BYOD]).

This procedure is performed on both the EMM Administrator console and the managed Google Android 14 device.

On the EMM console, configure the default enrollment as work profile for employee-owned devices (BYOD).

On the managed Google Android 14 device:

1. Go to the application drawer. 2. Ensure a Personal tab and a Work tab are present.

If on the EMM console, the default enrollment is not set for BYOD (work profile for employee-owned devices [BYOD]), or if on the managed Android 14 device, the user does not have a Work tab, this is a finding.

Fix

Configure the Google Android 14 device for BYOD (work profile for employee-owned devices [BYOD]).

On the EMM console, configure the default enrollment as work profile for employee-owned devices (BYOD).

Refer to the EMM documentation to determine how to configure the device.

Identifiers

Group ID
V-260165
Group title
PP-MDF-993300
Rule ID
SV-260165r959010_rule
Check ID
C-63896r948698_chk
Fix ID
F-63803r948699_fix