3.2.1.3 Ensure 'Allow Siri while device is locked' is set to 'Disabled'

Information

This recommendation pertains to access to Siri while the device is locked.

Rationale:

Access to Siri on a locked device may allow unauthorized users to access information otherwise not available to them. Siri has access to messaging, contacts, and a variety of other data.

Solution

1. Open Apple Configurator.
2. Open the Configuration Profile.
3. In the left windowpane, click on the 'Restrictions' tab.
4. In the right windowpane, under the tab 'Functionality', 'uncheck' the checkbox for 'Allow Siri while device is locked'.
5. Deploy the Configuration Profile.

Impact:

End-user must unlock the device before interacting with Siri.

See Also

https://workbench.cisecurity.org/files/1806