3.2.1.1 Ensure 'Allow screenshots and screen recording' is set to 'Disabled'

Information

This recommendation pertains to limiting screenshots and screen recordings.

Rationale:

Sensitive information may be displayed through a managed app that could be captured by screen shot or screen recording into the unmanaged space inadvertently or intentionally by a malicious insider.

Impact:

Screenshots will be unavailable for troubleshooting.

Solution

Open Apple Configurator.

Open the Configuration Profile.

In the left windowpane, click on the Restrictions tab.

In the right windowpane, under the tab Functionality, uncheck the checkbox for Allow screenshots and screen recording.

Deploy the Configuration Profile.

See Also

https://workbench.cisecurity.org/files/3064