AIOS-14-000100 - The mobile operating system must be configured to enforce a minimum password length of six characters.

CAT|II

CCI|CCI-000205

Rule-ID|SV-228729r561031_rule

STIG-ID|AIOS-14-000100

Vuln-ID|V-228729

AIOS-14-000200 - The mobile operating system must be configured to not allow passwords that include more than two repeating or sequential characters.

CCI|CCI-000366

Rule-ID|SV-228730r561031_rule

STIG-ID|AIOS-14-000200

Vuln-ID|V-228730

AIOS-14-000300 - The mobile operating system must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.

CCI|CCI-000057

Rule-ID|SV-228731r561031_rule

STIG-ID|AIOS-14-000300

Vuln-ID|V-228731

AIOS-14-000400 - The mobile operating system must be configured to not allow more than ten consecutive failed authentication attempts.

CCI|CCI-000044

Rule-ID|SV-228732r561031_rule

STIG-ID|AIOS-14-000400

Vuln-ID|V-228732

AIOS-14-000500 - The mobile operating system must provide the capability for the Administrator (MDM) to perform the following management function: enable/disable VPN protection across the device and [selection: other methods].

CAT|III

CCI|CCI-000066

CCI|CCI-000370

Rule-ID|SV-228733r561031_rule

STIG-ID|AIOS-14-000500

Vuln-ID|V-228733

AIOS-14-000700 - The mobile operating system must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DoD-approved commercial app repository, MDM server, mobile application store].

CCI|CCI-001806

Rule-ID|SV-228734r561031_rule

STIG-ID|AIOS-14-000700

Vuln-ID|V-228734

AIOS-14-001000 - Apple iOS/iPadOS must not include applications with the following characteristics: access to Siri when the device is locked.

CCI|CCI-000068

Rule-ID|SV-228735r561031_rule

STIG-ID|AIOS-14-001000

Vuln-ID|V-228735

AIOS-14-001100 - The mobile operating system whitelist must be configured to not include applications with the following characteristics: voice dialing application if available when MD is locked.

Rule-ID|SV-228736r561031_rule

STIG-ID|AIOS-14-001100

Vuln-ID|V-228736

AIOS-14-001500 - The mobile operating system must be configured to not display notifications when the device is locked.

CCI|CCI-000051

Rule-ID|SV-228737r561040_rule

STIG-ID|AIOS-14-001500

Vuln-ID|V-228737

AIOS-14-001600 - Apple iOS/iPadOS must not display notifications (calendar information) when the device is locked.

Rule-ID|SV-228738r561104_rule

STIG-ID|AIOS-14-001600

Vuln-ID|V-228738

AIOS-14-003300 - The mobile operating system must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.

CCI|CCI-000048

Rule-ID|SV-228739r561044_rule

STIG-ID|AIOS-14-003300

Vuln-ID|V-228739

AIOS-14-003600 - The mobile operating system must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

CCI|CCI-000097

Rule-ID|SV-228740r561031_rule

STIG-ID|AIOS-14-003600

Vuln-ID|V-228740

AIOS-14-003700 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud).

Rule-ID|SV-228741r561031_rule

STIG-ID|AIOS-14-003700

Vuln-ID|V-228741

AIOS-14-003800 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud document and data synchronization).

Rule-ID|SV-228742r561031_rule

STIG-ID|AIOS-14-003800

Vuln-ID|V-228742

AIOS-14-003900 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud Keychain).

Rule-ID|SV-228743r561031_rule

STIG-ID|AIOS-14-003900

Vuln-ID|V-228743

AIOS-14-004000 - Apple iOS/iPadOS must not allow backup to remote systems (My Photo Stream).

Rule-ID|SV-228744r561031_rule

STIG-ID|AIOS-14-004000

Vuln-ID|V-228744

AIOS-14-004100 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud Photo Sharing, also known as Shared Photo Streams).

Rule-ID|SV-228745r561031_rule

STIG-ID|AIOS-14-004100

Vuln-ID|V-228745

AIOS-14-004200 - Apple iOS/iPadOS must not allow backup to remote systems (managed applications data stored in iCloud).

Rule-ID|SV-228746r561031_rule

STIG-ID|AIOS-14-004200

Vuln-ID|V-228746

AIOS-14-004300 - Apple iOS/iPadOS must not allow backup to remote systems (enterprise books).

Rule-ID|SV-228747r561031_rule

STIG-ID|AIOS-14-004300

Vuln-ID|V-228747

AIOS-14-005200 - Apple iOS/iPadOS must not allow non-DoD applications to access DoD data.

CCI|CCI-002191

Rule-ID|SV-228748r561031_rule

STIG-ID|AIOS-14-005200

Vuln-ID|V-228748

AIOS-14-007600 - Apple iOS/iPadOS must implement the management setting: remove managed applications upon unenrollment from MDM (including sensitive and protected data).

CCI|CCI-001199

Rule-ID|SV-244559r734148_rule

STIG-ID|AIOS-14-007600

Vuln-ID|V-244559

AIOS-14-008800 - Apple iOS/iPadOS must require a valid password be successfully entered before the mobile device data is unencrypted.

CAT|I

Rule-ID|SV-228750r561031_rule

STIG-ID|AIOS-14-008800

Vuln-ID|V-228750

AIOS-14-008900 - Apple iOS/iPadOS must implement the management setting: limit Ad Tracking.

Rule-ID|SV-228751r561031_rule

STIG-ID|AIOS-14-008900

Vuln-ID|V-228751

AIOS-14-009000 - Apple iOS/iPadOS must implement the management setting: not allow automatic completion of Safari browser passcodes.

CCI|CCI-000381

Rule-ID|SV-228752r561031_rule

STIG-ID|AIOS-14-009000

Vuln-ID|V-228752

AIOS-14-009100 - Apple iOS/iPadOS must implement the management setting: Encrypt iTunes backups/Encrypt local backup.

Rule-ID|SV-228753r561031_rule

STIG-ID|AIOS-14-009100

Vuln-ID|V-228753

AIOS-14-009200 - Apple iOS/iPadOS must implement the management setting: not allow use of Handoff.

Rule-ID|SV-228754r561031_rule

STIG-ID|AIOS-14-009200

Vuln-ID|V-228754

AIOS-14-009300 - Apple iOS/iPadOS must implement the management setting: require the user to enter a password when connecting to an AirPlay-enabled device for the first time.

CCI|CCI-000063

Rule-ID|SV-228755r561031_rule

STIG-ID|AIOS-14-009300

Vuln-ID|V-228755

AIOS-14-009400 - Apple iOS/iPadOS must implement the management setting: Disable Allow MailDrop.

CCI|CCI-002314

Rule-ID|SV-228756r561031_rule

STIG-ID|AIOS-14-009400

Vuln-ID|V-228756

AIOS-14-009500 - Apple iOS/iPadOS must implement the management setting: Disable Allow Shared Albums.

Rule-ID|SV-228757r561031_rule

STIG-ID|AIOS-14-009500

Vuln-ID|V-228757

AIOS-14-009600 - iPhone and iPad must have the latest available iOS/iPadOS operating system installed.

Rule-ID|SV-228758r561031_rule

STIG-ID|AIOS-14-009600

Vuln-ID|V-228758

AIOS-14-009700 - Apple iOS/iPadOS must implement the management setting: use SSL for Exchange ActiveSync.

CCI|CCI-000764

Rule-ID|SV-228759r561031_rule

STIG-ID|AIOS-14-009700

Vuln-ID|V-228759

AIOS-14-009800 - Apple iOS/iPadOS must implement the management setting: not allow messages in an ActiveSync Exchange account to be forwarded or moved to other accounts in the Apple iOS/iPadOS Mail app.

Rule-ID|SV-228760r561031_rule

STIG-ID|AIOS-14-009800

Vuln-ID|V-228760

AIOS-14-009900 - Apple iOS/iPadOS must implement the management setting: Treat AirDrop as an unmanaged destination.

CCI|CCI-002008

Rule-ID|SV-228761r561031_rule

STIG-ID|AIOS-14-009900

Vuln-ID|V-228761

AIOS-14-010000 - Apple iOS/iPadOS must implement the management setting: not have any Family Members in Family Sharing.

Rule-ID|SV-228762r561031_rule

STIG-ID|AIOS-14-010000

Vuln-ID|V-228762

AIOS-14-010100 - Apple iOS/iPadOS must implement the management setting: not share location data through iCloud.

Rule-ID|SV-228763r561046_rule

STIG-ID|AIOS-14-010100

Vuln-ID|V-228763

AIOS-14-010200 - Apple iOS/iPadOS must implement the management setting: force Apple Watch wrist detection.

Rule-ID|SV-228764r561031_rule

STIG-ID|AIOS-14-010200

Vuln-ID|V-228764

AIOS-14-010300 - Apple iOS/iPadOS users must complete required training.

Rule-ID|SV-228765r561031_rule

STIG-ID|AIOS-14-010300

Vuln-ID|V-228765

AIOS-14-010400 - A managed photo app must be used to take and store work-related photos.

Rule-ID|SV-228766r561031_rule

STIG-ID|AIOS-14-010400

Vuln-ID|V-228766

AIOS-14-010600 - Apple iOS/iPadOS must implement the management setting: enable USB Restricted Mode.

Rule-ID|SV-228767r561031_rule

STIG-ID|AIOS-14-010600

Vuln-ID|V-228767

AIOS-14-010700 - Apple iOS/iPadOS must not allow managed apps to write contacts to unmanaged contacts accounts.

Rule-ID|SV-228768r561031_rule

STIG-ID|AIOS-14-010700

Vuln-ID|V-228768

AIOS-14-010800 - Apple iOS/iPadOS must not allow unmanaged apps to read contacts from managed contacts accounts.

Rule-ID|SV-228769r561031_rule

STIG-ID|AIOS-14-010800

Vuln-ID|V-228769

AIOS-14-010900 - Apple iOS/iPadOS must implement the management setting: disable AirDrop.

Rule-ID|SV-228770r561031_rule

STIG-ID|AIOS-14-010900

Vuln-ID|V-228770

AIOS-14-011000 - Apple iOS/iPadOS must implement the management setting: disable paired Apple Watch.

Rule-ID|SV-228771r561031_rule

STIG-ID|AIOS-14-011000

Vuln-ID|V-228771

AIOS-14-011100 - Apple iOS/iPadOS must disable Password AutoFill in browsers and applications.

Rule-ID|SV-228772r561031_rule

STIG-ID|AIOS-14-011100

Vuln-ID|V-228772

AIOS-14-011200 - Apple iOS/iPadOS must disable allow setting up new nearby devices.

Detections

Analytics

AirWatch - DISA Apple iOS/iPadOS 14 v1r2

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.3 Mar 7, 2023 Miscellaneous Metadata updated.
Revision 1.2 Feb 28, 2023 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.1 Apr 25, 2022 Miscellaneous References updated.

Detections

Analytics

AirWatch - DISA Apple iOS/iPadOS 14 v1r2 Download File

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

AirWatch - DISA Apple iOS/iPadOS 14 v1r2