← Back to Google Android 15 COPE Security Technical Implementation Guide

V-267558

CAT III (Low)

Android 15 devices must be configured to disable the use of third-party keyboards.

Rule ID

SV-267558r1033077_rule

STIG

Google Android 15 COPE Security Technical Implementation Guide

Version

V1R4

CCIs

CCI-000366

Discussion

Many third-party keyboard applications are known to contain malware. SFRID: FMT_SMF.1.1 #47

Check Content

Review the managed Google Android 15 configuration settings to confirm that no third-party keyboards are enabled. 
 
This procedure is performed on the EMM console.
 
On the EMM console:

COBO and COPE:

1. Open "Input methods".
2. Tap "Set input methods".
3. Verify only the approved keyboards are selected.

If third-party keyboards are allowed, this is a finding.

Fix Text

Configure the Google Android 15 device to disallow the use of third-party keyboards. 
 
On the EMM console:

COBO and COPE:

1. Open "Input methods".
2. Tap "Set input methods".
3. Select only the approved keyboard.

Additionally, admins can configure application allow lists for Google Play that do not have any third-party keyboards for user installation.