Free DISA STIG and SRG Library | Vaulted

V-25430

BlackBerry Web Desktop Manager must be configured to disable a user’s capability to perform self-service tasks.

Finding ID
WIR1365-02
Rule ID
SV-31616r3_rule
Severity
Cat II
CCE
(None)
Group Title
BWDM self-service tasks
CCI
(None)
Target Key
(None)
Documentable
No
Discussion

The overall security posture of the BlackBerry system is dependent on strict configuration management controls, including ensuring only authorized BlackBerry devices are being used and authorized devices are provisioned as required. When this configuration is not set as required, users may have the capability to activate unauthorized BlackBerry devices.

Fix Text

The BlackBerry Administration Service is configured to disable a user from performing self-service tasks via BWDM.

Check Content

Verify the BAS has been configured to disable users from performing self-service tasks. BAS >> Servers and components >> BlackBerry solution topology >> BlackBerry Domain >> Components view >> BlackBerry Administration service Select the "BlackBerry Web Desktop Manager Information" tab. Verify "Allow users to perform self service tasks" is set to "No". If not set as required, this is a finding.

Responsibility

System Administrator