AirWatch - DISA Apple iOS/iPadOS 14 v1r2

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: AirWatch - DISA Apple iOS/iPadOS 14 v1r2

Updated: 3/7/2023

Authority: App Management

Plugin: MDM

Revision: 1.3

Estimated Item Count: 53

File Details

Filename: DISA_STIG_Apple_iOS_14_v1r2-AirWatch.audit

Size: 80.5 kB

MD5: 8d825b44501ab2f180a49e74b2d462c8
SHA256: a3a92e356b55c655fc4a2562cb142c56c653947773859df5bf545ee7d599ca38

Audit Items

DescriptionCategories
AIOS-14-000100 - The mobile operating system must be configured to enforce a minimum password length of six characters.
AIOS-14-000200 - The mobile operating system must be configured to not allow passwords that include more than two repeating or sequential characters.
AIOS-14-000300 - The mobile operating system must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.
AIOS-14-000400 - The mobile operating system must be configured to not allow more than ten consecutive failed authentication attempts.
AIOS-14-000500 - The mobile operating system must provide the capability for the Administrator (MDM) to perform the following management function: enable/disable VPN protection across the device and [selection: other methods].
AIOS-14-000700 - The mobile operating system must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DoD-approved commercial app repository, MDM server, mobile application store].
AIOS-14-001000 - Apple iOS/iPadOS must not include applications with the following characteristics: access to Siri when the device is locked.
AIOS-14-001100 - The mobile operating system whitelist must be configured to not include applications with the following characteristics: voice dialing application if available when MD is locked.
AIOS-14-001500 - The mobile operating system must be configured to not display notifications when the device is locked.
AIOS-14-001600 - Apple iOS/iPadOS must not display notifications (calendar information) when the device is locked.
AIOS-14-003300 - The mobile operating system must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.
AIOS-14-003600 - The mobile operating system must be configured to not allow backup of [all applications, configuration data] to locally connected systems.
AIOS-14-003700 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud).
AIOS-14-003800 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud document and data synchronization).
AIOS-14-003900 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud Keychain).
AIOS-14-004000 - Apple iOS/iPadOS must not allow backup to remote systems (My Photo Stream).
AIOS-14-004100 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud Photo Sharing, also known as Shared Photo Streams).
AIOS-14-004200 - Apple iOS/iPadOS must not allow backup to remote systems (managed applications data stored in iCloud).
AIOS-14-004300 - Apple iOS/iPadOS must not allow backup to remote systems (enterprise books).
AIOS-14-005200 - Apple iOS/iPadOS must not allow non-DoD applications to access DoD data.
AIOS-14-007600 - Apple iOS/iPadOS must implement the management setting: remove managed applications upon unenrollment from MDM (including sensitive and protected data).
AIOS-14-008800 - Apple iOS/iPadOS must require a valid password be successfully entered before the mobile device data is unencrypted.
AIOS-14-008900 - Apple iOS/iPadOS must implement the management setting: limit Ad Tracking.
AIOS-14-009000 - Apple iOS/iPadOS must implement the management setting: not allow automatic completion of Safari browser passcodes.
AIOS-14-009100 - Apple iOS/iPadOS must implement the management setting: Encrypt iTunes backups/Encrypt local backup.
AIOS-14-009200 - Apple iOS/iPadOS must implement the management setting: not allow use of Handoff.
AIOS-14-009300 - Apple iOS/iPadOS must implement the management setting: require the user to enter a password when connecting to an AirPlay-enabled device for the first time.
AIOS-14-009400 - Apple iOS/iPadOS must implement the management setting: Disable Allow MailDrop.
AIOS-14-009500 - Apple iOS/iPadOS must implement the management setting: Disable Allow Shared Albums.
AIOS-14-009600 - iPhone and iPad must have the latest available iOS/iPadOS operating system installed.
AIOS-14-009700 - Apple iOS/iPadOS must implement the management setting: use SSL for Exchange ActiveSync.
AIOS-14-009800 - Apple iOS/iPadOS must implement the management setting: not allow messages in an ActiveSync Exchange account to be forwarded or moved to other accounts in the Apple iOS/iPadOS Mail app.
AIOS-14-009900 - Apple iOS/iPadOS must implement the management setting: Treat AirDrop as an unmanaged destination.
AIOS-14-010000 - Apple iOS/iPadOS must implement the management setting: not have any Family Members in Family Sharing.
AIOS-14-010100 - Apple iOS/iPadOS must implement the management setting: not share location data through iCloud.
AIOS-14-010200 - Apple iOS/iPadOS must implement the management setting: force Apple Watch wrist detection.
AIOS-14-010300 - Apple iOS/iPadOS users must complete required training.
AIOS-14-010400 - A managed photo app must be used to take and store work-related photos.
AIOS-14-010600 - Apple iOS/iPadOS must implement the management setting: enable USB Restricted Mode.
AIOS-14-010700 - Apple iOS/iPadOS must not allow managed apps to write contacts to unmanaged contacts accounts.
AIOS-14-010800 - Apple iOS/iPadOS must not allow unmanaged apps to read contacts from managed contacts accounts.
AIOS-14-010900 - Apple iOS/iPadOS must implement the management setting: disable AirDrop.
AIOS-14-011000 - Apple iOS/iPadOS must implement the management setting: disable paired Apple Watch.
AIOS-14-011100 - Apple iOS/iPadOS must disable Password AutoFill in browsers and applications.
AIOS-14-011200 - Apple iOS/iPadOS must disable allow setting up new nearby devices.
AIOS-14-011300 - Apple iOS/iPadOS must disable password proximity requests.
AIOS-14-011400 - Apple iOS/iPadOS must disable password sharing.
AIOS-14-011500 - Apple iOS/iPadOS must disable Find My Friends in the Find My app.
AIOS-14-011600 - The Apple iOS/iPadOS must be supervised by the MDM.
AIOS-14-011700 - Apple iOS/iPadOS must disable 'Allow USB drive access in Files app' if the AO has not approved the use of DoD-approved USB storage drives with iOS/iPadOS devices.