1.109 APPL-26-002220

Information

The macOS system must enforce On Device Dictation.

GROUP ID: V-277136
RULE ID: SV-277136r1148860

Dictation must be restricted to On Device Only to prevent potential data exfiltration.

The information system must be configured to provide only essential capabilities.

Solution

Configure the macOS system to enforce On Device Only Dictation by installing the "com.apple.applicationaccess" configuration profile.

See Also

https://workbench.cisecurity.org/benchmarks/26538