3.2.1.28 Ensure 'Show Control Center in Lock screen' is set to 'Disabled'

Information

This recommendation pertains to the display of Control Center on the lock screen.

Rationale:

When a device is lost or stolen, the Control Center may be used to enable airplane mode; thus preventing locating or erasing the device. It forces a malicious actor to power down the device, which then discards the encryption key in memory. This makes other attacks based on physical possession more difficult.

Solution

Open Apple Configurator.

Open the Configuration Profile.

In the left windowpane, click on the Restrictions tab.

In the right windowpane, under the tab Functionality, uncheck the checkbox for Show Control Center in Lock screen.

Deploy the Configuration Profile.

See Also

https://workbench.cisecurity.org/files/3064