| 3.2.1.1 Ensure 'Allow screenshots and screen recording' is set to 'Disabled' | ACCESS CONTROL, MEDIA PROTECTION |
| 3.2.1.8 Ensure 'Allow USB drive access in Files app' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 3.2.1.9 Ensure 'Allow network drive access in Files app' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 3.2.1.13 Ensure 'Allow users to accept untrusted TLS certificates' is set to 'Disabled' | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 3.2.1.18 Ensure 'Allow modifying cellular data app settings' is set to 'Disabled' | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 3.2.1.20 Ensure 'Allow pairing with non-Configurator hosts' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 3.4.2 Ensure 'Require alphanumeric value' is set to 'Enabled' | IDENTIFICATION AND AUTHENTICATION |
| 3.7.2 Ensure 'Allow Mail Drop' is set to 'Disabled' | ACCESS CONTROL, MEDIA PROTECTION |
| 4.1.2 Review Emergency Reset | CONFIGURATION MANAGEMENT |
| 4.1.3 Review Lockdown Mode | CONFIGURATION MANAGEMENT |
| 4.1.4 Ensure 'App Privacy Report' is enabled | CONFIGURATION MANAGEMENT |
| 4.1.5 Review Airprint | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 4.9 Ensure the latest iOS device architecture is used by high-value targets | CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT |
