AIOS-15-001000 - Apple iOS/iPadOS 15 must provide the capability for the Administrator (MDM) to perform the following management function: enable/disable VPN protection across the device and [selection: other methods].

800-53|CM-6(1)

800-53|CM-6b.

CAT|III

CCI|CCI-000366

CCI|CCI-000370

Rule-ID|SV-250919r801848_rule

STIG-ID|AIOS-15-001000

Vuln-ID|V-250919

AIOS-15-003000 - Apple iOS/iPadOS 15 must not allow backup to remote systems (iCloud).

800-53|SC-4

CAT|II

CCI|CCI-001090

Rule-ID|SV-250920r801851_rule

STIG-ID|AIOS-15-003000

Vuln-ID|V-250920

AIOS-15-003200 - Apple iOS/iPadOS 15 must not allow backup to remote systems (iCloud document and data synchronization).

Rule-ID|SV-250921r801854_rule

STIG-ID|AIOS-15-003200

Vuln-ID|V-250921

AIOS-15-003300 - Apple iOS/iPadOS 15 must not allow backup to remote systems (iCloud Keychain).

Rule-ID|SV-250922r801857_rule

STIG-ID|AIOS-15-003300

Vuln-ID|V-250922

AIOS-15-003400 - Apple iOS/iPadOS 15 must not allow backup to remote systems (My Photo Stream).

Rule-ID|SV-250923r801860_rule

STIG-ID|AIOS-15-003400

Vuln-ID|V-250923

AIOS-15-003500 - Apple iOS/iPadOS 15 must not allow backup to remote systems (iCloud Photo Sharing, also known as Shared Photo Streams).

Rule-ID|SV-250924r801863_rule

STIG-ID|AIOS-15-003500

Vuln-ID|V-250924

AIOS-15-003600 - Apple iOS/iPadOS 15 must not allow backup to remote systems (managed applications data stored in iCloud).

Rule-ID|SV-250925r801866_rule

STIG-ID|AIOS-15-003600

Vuln-ID|V-250925

AIOS-15-003700 - Apple iOS/iPadOS 15 must not allow backup to remote systems (enterprise books).

Rule-ID|SV-250926r801869_rule

STIG-ID|AIOS-15-003700

Vuln-ID|V-250926

AIOS-15-004900 - Apple iOS/iPadOS 15 must [selection: wipe protected data, wipe sensitive data] upon unenrollment from MDM.

800-53|MP-6(3)

CCI|CCI-001033

Rule-ID|SV-250927r801872_rule

STIG-ID|AIOS-15-004900

Vuln-ID|V-250927

AIOS-15-005000 - Apple iOS/iPadOS 15 must [selection: remove Enterprise application, remove all noncore applications (any nonfactory-installed application)] upon unenrollment from MDM.

Rule-ID|SV-250928r801875_rule

STIG-ID|AIOS-15-005000

Vuln-ID|V-250928

AIOS-15-006500 - Apple iOS/iPadOS 15 must be configured to enforce a minimum password length of six characters.

800-53|IA-5(1)(a)

CCI|CCI-000205

Rule-ID|SV-250929r801878_rule

STIG-ID|AIOS-15-006500

Vuln-ID|V-250929

AIOS-15-006600 - Apple iOS/iPadOS 15 must be configured to not allow passwords that include more than two repeating or sequential characters.

Rule-ID|SV-250930r801881_rule

STIG-ID|AIOS-15-006600

Vuln-ID|V-250930

AIOS-15-006700 - Apple iOS/iPadOS 15 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.

800-53|AC-11a.

CCI|CCI-000057

Rule-ID|SV-250931r801884_rule

STIG-ID|AIOS-15-006700

Vuln-ID|V-250931

AIOS-15-006800 - Apple iOS/iPadOS 15 must be configured to lock the display after 15 minutes (or less) of inactivity.

Rule-ID|SV-250932r801887_rule

STIG-ID|AIOS-15-006800

Vuln-ID|V-250932

AIOS-15-006900 - Apple iOS/iPadOS 15 must be configured to not allow more than 10 consecutive failed authentication attempts.

800-53|AC-7a.

CCI|CCI-000044

Rule-ID|SV-250933r801890_rule

STIG-ID|AIOS-15-006900

Vuln-ID|V-250933

AIOS-15-007000 - Apple iOS/iPadOS 15 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DoD-approved commercial app repository, MDM server, mobile application store].

Rule-ID|SV-250934r801893_rule

STIG-ID|AIOS-15-007000

Vuln-ID|V-250934

AIOS-15-007200 - Apple iOS/iPadOS 15 must not include applications with the following characteristics: access to Siri when the device is locked.

Rule-ID|SV-250935r801896_rule

STIG-ID|AIOS-15-007200

Vuln-ID|V-250935

AIOS-15-007300 - Apple iOS/iPadOS 15 allow list must be configured to not include applications with the following characteristics: voice dialing application if available when MD is locked.

Rule-ID|SV-250936r801899_rule

STIG-ID|AIOS-15-007300

Vuln-ID|V-250936

AIOS-15-007400 - Apple iOS/iPadOS 15 allowlist must be configured to not include applications with the following characteristics: - back up MD data to non-DoD cloud servers (including user and application access to cloud backup services);- transmit MD diagnostic data to non-DoD servers; - allows synchronization of data or applications between devices associated with user; and - allows unencrypted (or encrypted but not FIPS 140-2 validated) data sharing with other MDs or printers.

Rule-ID|SV-250937r802610_rule

STIG-ID|AIOS-15-007400

Vuln-ID|V-250937

AIOS-15-007500 - Apple iOS/iPadOS 15 must be configured to not display notifications when the device is locked.

800-53|AC-11(1)

CCI|CCI-000060

Rule-ID|SV-250938r801905_rule

STIG-ID|AIOS-15-007500

Vuln-ID|V-250938

AIOS-15-007600 - Apple iOS/iPadOS 15 must not display notifications (calendar information) when the device is locked.

Rule-ID|SV-250939r801908_rule

STIG-ID|AIOS-15-007600

Vuln-ID|V-250939

AIOS-15-008400 - Apple iOS/iPadOS 15 must be configured to display the DoD advisory warning message at startup or each time the user unlocks the device.

800-53|AC-8a.

CCI|CCI-000048

Rule-ID|SV-250940r801911_rule

STIG-ID|AIOS-15-008400

Vuln-ID|V-250940

AIOS-15-009200 - Apple iOS/iPadOS 15 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

Rule-ID|SV-250941r801914_rule

STIG-ID|AIOS-15-009200

Vuln-ID|V-250941

AIOS-15-009700 - Apple iOS/iPadOS 15 must not allow non-DoD applications to access DoD data.

800-53|AC-6(8)

800-53|SC-39

CCI|CCI-002233

CCI|CCI-002530

Rule-ID|SV-250942r853255_rule

STIG-ID|AIOS-15-009700

Vuln-ID|V-250942

AIOS-15-009800 - Apple iOS/iPadOS 15 must be configured to disable multiuser modes.

800-53|AC-2a.

CCI|CCI-002110

Rule-ID|SV-250943r853256_rule

STIG-ID|AIOS-15-009800

Vuln-ID|V-250943

AIOS-15-009900 - Apple iOS/iPadOS 15 must be configured to [selection: wipe protected data, wipe sensitive data] upon unenrollment from MDM.

Rule-ID|SV-250944r801923_rule

STIG-ID|AIOS-15-009900

Vuln-ID|V-250944

AIOS-15-010000 - Apple iOS/iPadOS 15 must be configured to [selection: remove Enterprise applications, remove all noncore applications (any nonfactory installed application)] upon unenrollment from MDM.

Rule-ID|SV-250945r801926_rule

STIG-ID|AIOS-15-010000

Vuln-ID|V-250945

AIOS-15-010200 - Apple iOS/iPadOS 15 must be configured to disable ad hoc wireless client-to-client connection capability.

800-53|SC-40

CCI|CCI-002536

Rule-ID|SV-250946r853257_rule

STIG-ID|AIOS-15-010200

Vuln-ID|V-250946

AIOS-15-010400 - Apple iOS/iPadOS 15 must require a valid password be successfully entered before the mobile device data is unencrypted.

CAT|I

Rule-ID|SV-250947r801932_rule

STIG-ID|AIOS-15-010400

Vuln-ID|V-250947

AIOS-15-010500 - Apple iOS/iPadOS 15 must implement the management setting: limit Ad Tracking.

Rule-ID|SV-250948r836937_rule

STIG-ID|AIOS-15-010500

Vuln-ID|V-250948

AIOS-15-010600 - Apple iOS/iPadOS 15 must implement the management setting: not allow automatic completion of Safari browser passcodes.

Rule-ID|SV-250949r801938_rule

STIG-ID|AIOS-15-010600

Vuln-ID|V-250949

AIOS-15-010700 - Apple iOS/iPadOS 15 must implement the management setting: Encrypt iTunes backups/Encrypt local backup.

Rule-ID|SV-250950r801941_rule

STIG-ID|AIOS-15-010700

Vuln-ID|V-250950

AIOS-15-010800 - Apple iOS/iPadOS 15 must implement the management setting: not allow use of Handoff.

Rule-ID|SV-250951r801944_rule

STIG-ID|AIOS-15-010800

Vuln-ID|V-250951

AIOS-15-010900 - Apple iOS/iPadOS 15 must implement the management setting: require the user to enter a password when connecting to an AirPlay-enabled device for the first time.

Rule-ID|SV-250952r801947_rule

STIG-ID|AIOS-15-010900

Vuln-ID|V-250952

AIOS-15-011000 - Apple iOS/iPadOS 15 must implement the management setting: Disable Allow MailDrop.

Rule-ID|SV-250953r801950_rule

STIG-ID|AIOS-15-011000

Vuln-ID|V-250953

AIOS-15-011100 - Apple iOS/iPadOS 15 must implement the management setting: Disable Allow Shared Albums.

Rule-ID|SV-250954r801953_rule

STIG-ID|AIOS-15-011100

Vuln-ID|V-250954

AIOS-15-011200 - iPhone and iPad must have the latest available iOS/iPadOS operating system installed.

Rule-ID|SV-250955r801956_rule

STIG-ID|AIOS-15-011200

Vuln-ID|V-250955

AIOS-15-011300 - Apple iOS/iPadOS 15 must implement the management setting: use SSL for Exchange ActiveSync.

Rule-ID|SV-250956r801959_rule

STIG-ID|AIOS-15-011300

Vuln-ID|V-250956

AIOS-15-011400 - Apple iOS/iPadOS 15 must implement the management setting: not allow messages in an ActiveSync Exchange account to be forwarded or moved to other accounts in the Apple iOS/iPadOS 15 Mail app.

Rule-ID|SV-250957r801962_rule

STIG-ID|AIOS-15-011400

Vuln-ID|V-250957

AIOS-15-011500 - Apple iOS/iPadOS 15 must implement the management setting: Treat AirDrop as an unmanaged destination.

Rule-ID|SV-250958r801965_rule

STIG-ID|AIOS-15-011500

Vuln-ID|V-250958

AIOS-15-011600 - Apple iOS/iPadOS 15 must implement the management setting: not have any Family Members in Family Sharing.

Rule-ID|SV-250959r801968_rule

STIG-ID|AIOS-15-011600

Vuln-ID|V-250959

AIOS-15-011700 - Apple iOS/iPadOS 15 must implement the management setting: not share location data through iCloud.

Rule-ID|SV-250960r801971_rule

STIG-ID|AIOS-15-011700

Vuln-ID|V-250960

AIOS-15-011800 - Apple iOS/iPadOS 15 must implement the management setting: force Apple Watch wrist detection.

Detections

Analytics

MobileIron - DISA Apple iOS/iPadOS 15 STIG v1r4

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.2 Feb 13, 2026 Miscellaneous Metadata updated. References updated.
Revision 1.1 Jun 17, 2024 Miscellaneous Metadata updated.

Detections

Analytics

MobileIron - DISA Apple iOS/iPadOS 15 STIG v1r4 Download File

Audit Details

File Details

Audit Changelog

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

MobileIron - DISA Apple iOS/iPadOS 15 STIG v1r4