1.111 APPL-15-002220

Information

The macOS system must enforce On Device Dictation.

GROUP ID: V-268528
RULE ID: SV-268528r1034524

Dictation must be restricted to On Device Only to prevent potential data exfiltration.

The information system must be configured to provide only essential capabilities.

Solution

Configure the macOS system to enforce On Device Only Dictation by installing the "com.apple.applicationaccess" configuration profile.

See Also

https://workbench.cisecurity.org/benchmarks/23761