CA-05: Require App Protection for Mobile Access

CA-05 is a security control that mobile devices accessing corporate data should use apps with protection policies. this prevents data leakage through unmanaged apps and ensures corporate data remains protected on personal devices. It requires that a conditional access policy requires approved or compliant applications for mobile and policy targets ios and android platforms, office 365 or all cloud apps are protected.

Mobile devices accessing corporate data should use apps with protection policies. This prevents data leakage through unmanaged apps and ensures corporate data remains protected on personal devices.

TrueConfig provides one-click remediation for CA-05. Creates a CA policy requiring app protection for mobile devices. PREREQUISITE: Intune App Protection Policies must be configured.

This control requires Azure AD Premium P1 (included in Microsoft 365 E3) or higher.

CA-05 is included in the Enhanced Security baseline (Level 2). This level adds stricter controls for security-conscious organizations.