Mobile devices that access OFFICIAL: Sensitive or PROTECTED systems or data use mobile platforms that have completed a Common Criteria evaluation against the Protection Profile for Mobile Device Fundamentals, version 3.2 or later, and are operated in accordance with the latest version of their associated ASD security configuration guide.
Topic
Approved mobile platforms
Applicable to
Official, Protected
History
Mar 2024
Mobile devices that access OFFICIAL: Sensitive or PROTECTED systems or data use mobile platforms that have completed a Common Criteria evaluation against the Protection Profile for Mobile Device Fundamentals, version 3.2 or later, and are operated in accordance with the latest version of their associated ASD security configuration guide.
The existing control relating to the use of mobile platforms that have completed a Common Criteria evaluation against the Protection Profile for Mobile Device Fundamentals, version 3.2 or later, was amended to version 3.3 or later.
Sep 2023
Mobile devices that access OFFICIAL: Sensitive or PROTECTED systems or data use mobile platforms that have completed a Common Criteria evaluation against the Protection Profile for Mobile Device Fundamentals, version 3.2 or later, and are operated in accordance with the latest version of their associated ASD security configuration guide.
The existing control relating to mobile devices not accessing OFFICIAL: Sensitive or PROTECTED systems or data unless using an ASD-approved platform was amended to ensure such mobile platforms have completed a Common Criteria evaluation against the Protection Profile for Mobile Device Fundamentals, version 3.2 or later.
Sep 2023
Mobile devices that access OFFICIAL: Sensitive or PROTECTED systems or data use mobile platforms that have completed a Common Criteria evaluation against the Protection Profile for Mobile Device Fundamentals, version 3.2 or later, and are operated in accordance with the latest version of their associated ASD security configuration guide.
The existing control relating to the use of privately-owned mobile devices for accessing OFFICIAL: Sensitive or PROTECTED systems or data was amended to separate out the requirement for an approved mobile platform into its own control. [ISM-1400, ISM-1867]