← Back to Google Android 16 COPE Security Technical Implementation Guide

V-276883

CAT III (Low)

Android 16 devices must be configured to disable the use of third-party keyboards.

Rule ID

SV-276883r1140441_rule

STIG

Google Android 16 COPE Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000366

Discussion

Many third-party keyboard applications are known to contain malware. SFR ID: FMT_SMF.1.1 #47

Check Content

Review the managed Google Android 16 configuration settings to confirm that no third-party keyboards are enabled. 
 
This procedure is performed on the EMM Administration Console.
 
On the EMM console:

COBO and COPE:

1. Open "Input methods".
2. Tap "Set input methods".
3. Verify that only the approved keyboards are selected.

If third-party keyboards are allowed, this is a finding.

Fix Text

Configure the Google Android 16 device to disallow the use of third-party keyboards. 
 
On the EMM console:

COBO and COPE:

1. Open "Input methods".
2. Tap "Set input methods".
3. Select only the approved keyboard.

Admins can also configure application allowlists for Google Play that do not have any third-party keyboards for user installation.