Detections
Analytics

AIOS-17-013100 - Apple iOS/iPadOS 17 must disable 'Find My Friends' in the 'Find My' app - Find My app.

Information

This control does not share a DOD user's location but encourages location sharing between DOD mobile device users, which can lead to operational security (OPSEC) risks. Sharing the location of a DOD mobile device is a violation of AIOS-17-011700.

SFR ID: FMT_SMF_EXT.1.1 #47

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Install a configuration profile to disable 'Find My Friends' in the Find My app and 'Allow modifying Find My Friends' in the management tool. This a supervised-only control.

See Also

https://public.cyber.mil/wp-content/uploads/U_Apple_iOS-iPadOS_17_V2R2_STIG.zip

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-20(2), 800-53|CM-6b., CAT|III, CCI|CCI-000097, CCI|CCI-000366, Rule-ID|SV-258366r959010_rule, STIG-ID|AIOS-17-013100, Vuln-ID|V-258366

Plugin: MDM

Control ID: 9c0b2458e4116e41649fc81a05a6a37b87242e66855a700b04097801d1fdf426