Detections
Analytics

3.2.1.18 Ensure 'Allow modifying cellular data app settings' is set to 'Disabled'

Information

This recommendation pertains to modifying the use of cellular data by applications.

Rationale:

It is appropriate for an institution to have remote locating and erasure capability with their devices. Forcing cellular data to remain active supports that functionality.

Solution

Open Apple Configurator.

Open the Configuration Profile.

In the left window pane, click on the Restrictions tab.

In the right window pane, under the tab Functionality, uncheck the checkbox for Allow modifying cellular data app settings.

Deploy the Configuration Profile.

See Also

https://workbench.cisecurity.org/benchmarks/15549

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

References: 800-53|CM-2, 800-53|CM-6, 800-53|CM-7, 800-53|CM-7(1), 800-53|CM-9, 800-53|SA-3, 800-53|SA-8, 800-53|SA-10, CSCv7|5.1

Plugin: MDM

Control ID: b72d01df8e8cf4fd2d658e206c430576878a10613910d0ec27823b89f9bc7f2e