AIOS-13-000100 - Apple iOS/iPadOS must be configured to enforce a minimum password length of six characters.

800-53|IA-5(1)(a)

CAT|II

CCI|CCI-000205

Rule-ID|SV-219347r604137_rule

STIG-ID|AIOS-13-000100

STIG-Legacy|SV-106523

STIG-Legacy|V-97419

Vuln-ID|V-219347

AIOS-13-000200 - Apple iOS/iPadOS must be configured to not allow passwords that include more than two repeating or sequential characters.

800-53|CM-6b.

CCI|CCI-000366

Rule-ID|SV-219348r604137_rule

STIG-ID|AIOS-13-000200

STIG-Legacy|SV-106525

STIG-Legacy|V-97421

Vuln-ID|V-219348

AIOS-13-000300 - Apple iOS/iPadOS must be configured to lock the display after 15 minutes (or less) of inactivity.

800-53|AC-11a.

CCI|CCI-000057

Rule-ID|SV-219349r604137_rule

STIG-ID|AIOS-13-000300

STIG-Legacy|SV-106527

STIG-Legacy|V-97423

Vuln-ID|V-219349

AIOS-13-000400 - Apple iOS/iPadOS must be configured to not allow more than 10 consecutive failed authentication attempts.

800-53|AC-7a.

CAT|III

CCI|CCI-000044

Rule-ID|SV-219350r604137_rule

STIG-ID|AIOS-13-000400

STIG-Legacy|SV-106529

STIG-Legacy|V-97425

Vuln-ID|V-219350

AIOS-13-001000 - Apple iOS/iPadOS must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: Apple App Store].

800-53|AC-17(2)

CCI|CCI-000068

Rule-ID|SV-219351r604137_rule

STIG-ID|AIOS-13-001000

STIG-Legacy|SV-106533

STIG-Legacy|V-97429

Vuln-ID|V-219351

AIOS-13-001300 - Apple iOS/iPadOS must not include applications with the following characteristics: access to Siri when the device is locked.

Rule-ID|SV-219352r604137_rule

STIG-ID|AIOS-13-001300

STIG-Legacy|SV-106535

STIG-Legacy|V-97431

Vuln-ID|V-219352

AIOS-13-001400 - Apple iOS/iPadOS must not include applications with the following characteristics: Voice dialing application if available when MD is locked.

800-53|CM-6(1)

CCI|CCI-000370

Rule-ID|SV-219353r604137_rule

STIG-ID|AIOS-13-001400

STIG-Legacy|SV-106537

STIG-Legacy|V-97433

Vuln-ID|V-219353

AIOS-13-001800 - Apple iOS/iPadOS must not display notifications when the device is locked.

Rule-ID|SV-219354r604137_rule

STIG-ID|AIOS-13-001800

STIG-Legacy|SV-106539

STIG-Legacy|V-97435

Vuln-ID|V-219354

AIOS-13-001900 - Apple iOS/iPadOS must not display notifications (calendar information) when the device is locked.

800-53|CM-11b.

CCI|CCI-001806

Rule-ID|SV-219355r604137_rule

STIG-ID|AIOS-13-001900

STIG-Legacy|SV-106541

STIG-Legacy|V-97437

Vuln-ID|V-219355

AIOS-13-003600 - Apple iOS/iPadOS must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.

800-53|CM-7(2)

CCI|CCI-001764

Rule-ID|SV-219356r604137_rule

STIG-ID|AIOS-13-003600

STIG-Legacy|SV-106543

STIG-Legacy|V-97439

Vuln-ID|V-219356

AIOS-13-004000 - Apple iOS/iPadOS must not allow backup of managed app data to locally connected systems.

Rule-ID|SV-219357r604137_rule

STIG-ID|AIOS-13-004000

STIG-Legacy|SV-106545

STIG-Legacy|V-97441

Vuln-ID|V-219357

AIOS-13-004100 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud).

Rule-ID|SV-219358r604137_rule

STIG-ID|AIOS-13-004100

STIG-Legacy|SV-106547

STIG-Legacy|V-97443

Vuln-ID|V-219358

AIOS-13-004200 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud document and data synchronization).

Rule-ID|SV-219359r604137_rule

STIG-ID|AIOS-13-004200

STIG-Legacy|SV-106549

STIG-Legacy|V-97445

Vuln-ID|V-219359

AIOS-13-004300 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud Keychain).

800-53|CM-7(5)(a)

CCI|CCI-001772

Rule-ID|SV-219360r604137_rule

STIG-ID|AIOS-13-004300

STIG-Legacy|SV-106551

STIG-Legacy|V-97447

Vuln-ID|V-219360

AIOS-13-004400 - Apple iOS/iPadOS must not allow backup to remote systems (My Photo Stream).

800-53|CM-7(1)(b)

CCI|CCI-001761

Rule-ID|SV-219361r604137_rule

STIG-ID|AIOS-13-004400

STIG-Legacy|SV-106553

STIG-Legacy|V-97449

Vuln-ID|V-219361

AIOS-13-004500 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud Photo Sharing, also known as Shared Photo Streams).

Rule-ID|SV-219362r604137_rule

STIG-ID|AIOS-13-004500

STIG-Legacy|SV-106555

STIG-Legacy|V-97451

Vuln-ID|V-219362

AIOS-13-004600 - Apple iOS/iPadOS must not allow backup to remote systems (managed applications data stored in iCloud).

Rule-ID|SV-219363r604137_rule

STIG-ID|AIOS-13-004600

STIG-Legacy|SV-106557

STIG-Legacy|V-97453

Vuln-ID|V-219363

AIOS-13-004700 - Apple iOS/iPadOS must not allow backup to remote systems (enterprise books).

Rule-ID|SV-219364r604137_rule

STIG-ID|AIOS-13-004700

STIG-Legacy|SV-106559

STIG-Legacy|V-97455

Vuln-ID|V-219364

AIOS-13-005600 - Apple iOS/iPadOS must not allow non-DoD applications to access DoD data.

Rule-ID|SV-219365r604137_rule

STIG-ID|AIOS-13-005600

STIG-Legacy|SV-106561

STIG-Legacy|V-97457

Vuln-ID|V-219365

AIOS-13-008900 - Apple iOS/iPadOS must implement the management setting: remove managed applications upon unenrollment from MDM (including sensitive and protected data).

800-53|SC-28

CCI|CCI-001199

Rule-ID|SV-219366r604137_rule

STIG-ID|AIOS-13-008900

STIG-Legacy|SV-106565

STIG-Legacy|V-97461

Vuln-ID|V-219366

AIOS-13-010500 - Apple iOS/iPadOS must require a valid password be successfully entered before the mobile device data is unencrypted.

CAT|I

Rule-ID|SV-219367r604137_rule

STIG-ID|AIOS-13-010500

STIG-Legacy|SV-106567

STIG-Legacy|V-97463

Vuln-ID|V-219367

AIOS-13-010600 - Apple iOS/iPadOS must implement the management setting: limit Ad Tracking.

Rule-ID|SV-219368r604137_rule

STIG-ID|AIOS-13-010600

STIG-Legacy|SV-106569

STIG-Legacy|V-97465

Vuln-ID|V-219368

AIOS-13-010700 - Apple iOS/iPadOS must implement the management setting: not allow automatic completion of Safari browser passcodes.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-219369r604137_rule

STIG-ID|AIOS-13-010700

STIG-Legacy|SV-106571

STIG-Legacy|V-97467

Vuln-ID|V-219369

AIOS-13-010800 - Apple iOS/iPadOS must implement the management setting: Encrypt iTunes backups / Encrypt local backup.

Rule-ID|SV-219370r604137_rule

STIG-ID|AIOS-13-010800

STIG-Legacy|SV-106573

STIG-Legacy|V-97469

Vuln-ID|V-219370

AIOS-13-010900 - Apple iOS/iPadOS must implement the management setting: not allow use of Handoff.

Rule-ID|SV-219371r604137_rule

STIG-ID|AIOS-13-010900

STIG-Legacy|SV-106575

STIG-Legacy|V-97471

Vuln-ID|V-219371

AIOS-13-011100 - Apple iOS/iPadOS must implement the management setting: require the user to enter a password when connecting to an AirPlay-enabled device for the first time.

800-53|AC-17a.

CCI|CCI-000063

Rule-ID|SV-219372r604137_rule

STIG-ID|AIOS-13-011100

STIG-Legacy|SV-106577

STIG-Legacy|V-97473

Vuln-ID|V-219372

AIOS-13-011200 - Apple iOS/iPadOS must implement the management setting: Disable Allow MailDrop.

800-53|AC-17(1)

CCI|CCI-002314

Rule-ID|SV-219373r604137_rule

STIG-ID|AIOS-13-011200

STIG-Legacy|SV-106579

STIG-Legacy|V-97475

Vuln-ID|V-219373

AIOS-13-011300 - Apple iOS/iPadOS must implement the management setting: Disable Allow Shared Albums.

Rule-ID|SV-219374r604137_rule

STIG-ID|AIOS-13-011300

STIG-Legacy|SV-106581

STIG-Legacy|V-97477

Vuln-ID|V-219374

AIOS-13-011400 - iPhone and iPad must have the latest available iOS operating system installed.

Rule-ID|SV-219375r604137_rule

Detections

Analytics

MobileIron - DISA Apple iOS/iPadOS 13 v2r1

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Mar 7, 2023 Miscellaneous Metadata updated. References updated.
Revision 1.1 Apr 25, 2022 Miscellaneous Metadata updated. References updated.

Detections

Analytics

MobileIron - DISA Apple iOS/iPadOS 13 v2r1 Download File

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

MobileIron - DISA Apple iOS/iPadOS 13 v2r1