3.2.1.1 Ensure 'Allow screenshots and screen recording' is set to 'Disabled'

Information

This recommendation pertains to limiting screenshots and screen recordings.

Rationale:

Sensitive information may be displayed through a managed app that could be captured by screen shot or screen recording into the unmanaged space inadvertently or intentionally by a malicious insider.

Solution

1. Open Apple Configurator.
2. Open the Configuration Profile.
3. In the left windowpane, click on the 'Restrictions' tab.
4. In the right windowpane, under the tab 'Functionality', 'uncheck' the checkbox for 'Allow screenshots and screen recording'.
5. Deploy the Configuration Profile.

Impact:

Screenshots will be unavailable for troubleshooting.

See Also

https://workbench.cisecurity.org/files/1688