STIGUI
V-267553CAT II — Medium severitySV-267553r1031844_rule

Google Android 15 must be provisioned as a fully managed device and configured to create a work profile.

Rule version GOOG-15-010300 · STIG v1 · 2026-08-24

Discussion

The Android Enterprise work profile is the designated application group for the COPE use case.

SFRID: FMT_SMF.1.1 #47

Check

Review that managed Google Android 15 is configured as Corporate Owned Work Managed.

This procedure is performed on both the EMM Administrator console and the managed Google Android 15 device.

On the EMM console, configure the default enrollment as Corporate Owned and select "Use for Work & Personal".

On the managed Google Android 15 device:

1. Go to the application drawer. 2. Ensure a Personal tab and a Work tab are present.

If on the EMM console the account the default enrollment is set to Corporate Owned Work Managed or on the managed Android 15 device the user does not have a Work tab, this is a finding.

Fix

Configure the Google Android 15 device as corporate owned with a work profile.

On the EMM console, configure the default enrollment as Corporate Owned, and select "Use for Work & Personal".

Refer to the EMM documentation to determine how to configure the device.

Identifiers

Group ID
V-267553
Group title
PP-MDF-993300
Rule ID
SV-267553r1031844_rule
Check ID
C-71477r1031842_chk
Fix ID
F-71380r1031843_fix