3.2.1.8 Ensure 'Allow USB drive access in Files app' is set to 'Disabled'

Information

This recommendation pertains to preventing the Files app from accessing USB media.

Rationale:

The Files app provides a local file system and interface to USB media for iOS and iPadOS devices. In environments with sensitive data and strict data loss prevention policies, disabling the use of USB media with such devices may reduce the risk of data leakage.

Solution

Open Apple Configurator.

Open the Configuration Profile.

In the left windowpane, click on the Restrictions tab.

In the right windowpane, under the tab Functionality, uncheck the checkbox for Allow USB drive access in Files app.

Deploy the Configuration Profile.

See Also

https://workbench.cisecurity.org/files/3064