Security

• General
  • Common Criteria
    • Common Criteria mode
  • Updates
    • Automatically apply system updates
  • Networking
    • Automatic time enabled
    • Use US DoD certificate
  • Input methods
    • Only allow system input methods
  • Google
    • Enforce Google Play Protect
    • Backup services
    • Chrome search suggestions
  • Logging
    • Security logging
  • Other
    • USB data signaling enabled
• Lock screen
  • Keyguard
    • Allow trust agents
    • Allow fingerprint unlock
    • Allow face unlock
    • Allow iris unlock
    • Sensitive notification content
    • Camera shortcut at lock screen
    • Allow all notifications on lock screen
  • Support
    • Organization name
    • Lock screen information
    • Session start message
    • Short support message
    • Long support message
• Remote/SMS Wipe
  • Capability
    • Wipe device by SMS message
  • Message bodies
    • Wipe message
    • Success acknowledgement
    • Wipe failure response
  • Initiators
    • Any sender can wipe
    • Wipe sender
  • Reinforcement
    • Wipe on SIM removal or change
• Password policy
  • User
    • Complexity
    • Expiration
    • Maximum failed attempts
    • History restriction
  • Administrator
    • Maximum failed attempts
    • Display wipe risk warning
    • Confirm PIN without pressing OK
• Threat detection
  • Device threats
    • Development settings enabled
    • Device rooted
    • Google Play Protect disabled
    • HTTP Proxy enabled
    • SELinux disabled
    • USB debugging enabled
    • App installs over USB unverified
    • Device attestation failed
  • App threats
    • Signature check failed
    • Suspicious permission detected