| 2.2.1.2 Ensure 'Allow Siri while device is locked' is set to 'Disabled' | AirWatch - CIS Apple iPadOS 17 v1.1.0 End User Owned L1 | MDM | ACCESS CONTROL |
| 2.2.1.6 Ensure 'Allow users to accept untrusted TLS certificates' is set to 'Disabled' | AirWatch - CIS Apple iPadOS 18 v2.0.0 L2 End User Owned | MDM | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 2.2.1.6 Ensure 'Allow users to accept untrusted TLS certificates' is set to 'Disabled' | MobileIron - CIS Apple iPadOS 17 v1.1.0 End User Owned L2 | MDM | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 2.2.1.14 Ensure 'Show Control Center in Lock screen' is set to 'Disabled' | AirWatch - CIS Apple iPadOS 17 v1.1.0 End User Owned L1 | MDM | ACCESS CONTROL |
| 2.8.1 Ensure 'Notification Settings' are configured for all 'Managed Apps' | MobileIron - CIS Apple iPadOS 26 v1.0.0 L1 End User Owned | MDM | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 2.8.1 Ensure 'Notification Settings' are configured for all 'Managed Apps' | AirWatch - CIS Apple iPadOS 17 v1.1.0 End User Owned L1 | MDM | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 3.2.1.2 Ensure 'Allow voice dialing while device is locked' is set to 'Disabled' | AirWatch - CIS Apple iPadOS 18 v2.0.0 L1 Institutionally Owned | MDM | ACCESS CONTROL |
| 3.2.1.2 Ensure 'Allow voice dialing while device is locked' is set to 'Disabled' | MobileIron - CIS Apple iPadOS 26 v1.0.0 L1 Institutionally Owned | MDM | ACCESS CONTROL |
| 3.2.1.2 Ensure 'Allow voice dialing while device is locked' is set to 'Disabled' | AirWatch - CIS Apple iPadOS 17 Institutionally Owned L1 | MDM | ACCESS CONTROL |
| 3.2.1.3 Ensure 'Allow Siri while device is locked' is set to 'Disabled' | MobileIron - CIS Apple iPadOS 26 v1.0.0 L1 Institutionally Owned | MDM | ACCESS CONTROL |
| 3.2.1.8 Ensure 'Allow USB drive access in Files app' is set to 'Disabled' | AirWatch - CIS Apple iPadOS 17 Institutionally Owned L2 | MDM | CONFIGURATION MANAGEMENT |
| 3.2.1.8 Ensure 'Allow USB drive access in Files app' is set to 'Disabled' | MobileIron - CIS Apple iPadOS 17 Institutionally Owned L2 | MDM | CONFIGURATION MANAGEMENT |
| 3.2.1.9 Ensure 'Allow network drive access in Files app' is set to 'Disabled' | AirWatch - CIS Apple iPadOS 18 v2.0.0 L2 Institutionally Owned | MDM | CONFIGURATION MANAGEMENT |
| 3.2.1.9 Ensure 'Allow network drive access in Files app' is set to 'Disabled' | AirWatch - CIS Apple iPadOS 17 Institutionally Owned L2 | MDM | CONFIGURATION MANAGEMENT |
| 3.2.1.13 Ensure 'Allow users to accept untrusted TLS certificates' is set to 'Disabled' | AirWatch - CIS Apple iPadOS 18 v2.0.0 L2 Institutionally Owned | MDM | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 3.2.1.13 Ensure 'Allow users to accept untrusted TLS certificates' is set to 'Disabled' | MobileIron - CIS Apple 18 v2.0.0 L2 Institutionally Owned | MDM | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 3.2.1.18 Ensure 'Allow modifying cellular data app settings' is set to 'Disabled' | AirWatch - CIS Apple iPadOS 18 v2.0.0 L2 Institutionally Owned | MDM | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 3.2.1.29 Ensure 'Allow proximity based password sharing requests' is set to 'Disabled' | AirWatch - CIS Apple iPadOS 26 v1.0.0 L1 Institutionally Owned | MDM | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY |
| 3.8.1 Ensure 'Notification Settings' are configured for all 'Managed Apps' | AirWatch - CIS Apple iPadOS 18 v2.0.0 L1 Institutionally Owned | MDM | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 3.8.1 Ensure 'Notification Settings' are configured for all 'Managed Apps' | MobileIron - CIS Apple iPadOS 18 v2.0.0 L1 Institution Owned | MDM | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 3.8.1 Ensure 'Notification Settings' are configured for all 'Managed Apps' | AirWatch - CIS Apple iPadOS 17 Institutionally Owned L1 | MDM | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 3.9.1 Ensure 'If Lost, Return to...' Message is 'Configured' | MobileIron - CIS Apple iPadOS 18 v2.0.0 L1 Institution Owned | MDM | ACCESS CONTROL |
| 3.9.1 Ensure 'If Lost, Return to...' Message is 'Configured' | AirWatch - CIS Apple iPadOS 26 v1.0.0 L1 Institutionally Owned | MDM | ACCESS CONTROL |
| 5.1.3 Ensure Signed System Volume (SSV) Is Enabled | CIS Apple macOS 13.0 Ventura Cloud-tailored v1.1.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.1.4 Ensure Signed System Volume (SSV) Is Enabled | CIS Apple macOS 14.0 Sonoma v3.1.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| ARBA-NT-000970 - AOS, in conjunction with a remote device, must prevent the device from simultaneously establishing nonremote connections with the system and communicating via some other connection to resources in external networks. | DISA HPE Aruba Networking AOS Wireless STIG v1r2 | ArubaOS | SYSTEM AND COMMUNICATIONS PROTECTION |
| ARBA-NT-001600 - The site must conduct continuous wireless Intrusion Detection System (IDS) scanning. | DISA HPE Aruba Networking AOS Wireless STIG v1r2 | ArubaOS | SYSTEM AND INFORMATION INTEGRITY |
| MADB-10-001700 - MariaDB must by default shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure. | DISA MariaDB Enterprise 10.x STIG v2r5 Unix | Unix | AUDIT AND ACCOUNTABILITY |
| ZEBR-14-002800 - Zebra Android 14 must be configured to enable audit logging. | MobileIron - DISA Zebra Android 14 COBO STIG v1r2 | MDM | AUDIT AND ACCOUNTABILITY |
| ZEBR-14-002800 - Zebra Android 14 must be configured to enable audit logging. | AirWatch - DISA Zebra Android 14 COPE STIG v1r2 | MDM | AUDIT AND ACCOUNTABILITY |
| ZEBR-14-006000 - Zebra Android 14 must be configured to enforce a minimum password length of six characters. | MobileIron - DISA Zebra Android 14 COBO STIG v1r2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| ZEBR-14-006100 - Zebra Android 14 must be configured to not allow passwords that include more than four repeating or sequential characters - Alphanumeric | MobileIron - DISA Zebra Android 14 COBO STIG v1r2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| ZEBR-14-006100 - Zebra Android 14 must be configured to not allow passwords that include more than four repeating or sequential characters - Numbers | AirWatch - DISA Zebra Android 14 COBO STIG v1r2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| ZEBR-14-006600 - Zebra Android 14 must be configured to enforce an application installation policy by specifying an application allowlist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version]. | AirWatch - DISA Zebra Android 14 COBO STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-14-006700 - Zebra Android 14 allowlist must be configured to not include applications with the following characteristics: | AirWatch - DISA Zebra Android 14 COPE STIG v1r2 | MDM | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION |
| ZEBR-14-007200 - Zebra Android 14 must be configured to disable trust agents - NOTE: This requirement is not applicable (NA) for specific biometric authentication factors included in the product's Common Criteria evaluation. | AirWatch - DISA Zebra Android 14 COBO STIG v1r2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| ZEBR-14-007400 - Zebra Android 14 must be configured to disable developer modes. | AirWatch - DISA Zebra Android 14 COBO STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-14-007700 - Zebra Android 14 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the device. | AirWatch - DISA Zebra Android 14 COPE STIG v1r2 | MDM | ACCESS CONTROL |
| ZEBR-14-008400 - Zebra Android 14 must be configured to disable USB mass storage mode. | AirWatch - DISA Zebra Android 14 COPE STIG v1r2 | MDM | SYSTEM AND COMMUNICATIONS PROTECTION |
| ZEBR-14-008600 - Zebra Android 14 must be configured to not allow backup of [all applications, configuration data] to remote systems. | AirWatch - DISA Zebra Android 14 COPE STIG v1r2 | MDM | SYSTEM AND COMMUNICATIONS PROTECTION |
| ZEBR-14-008900 - Zebra Android 14 must be configured to disable exceptions to the access control policy that prevent [selection: application processes, groups of application processes] from accessing [selection: all, private] data stored by other [selection: application processes, groups of application processes]. | AirWatch - DISA Zebra Android 14 COPE STIG v1r2 | MDM | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| ZEBR-14-009000 - Zebra Android 14 must be configured to disable multiuser modes. | MobileIron - DISA Zebra Android 14 COBO STIG v1r2 | MDM | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| ZEBR-14-009800 - Zebra Android 14 users must complete required training. | MobileIron - DISA Zebra Android 14 COBO STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-14-009900 - Zebra Android 14 must be configured to enforce that Wi-Fi Sharing is disabled. | MobileIron - DISA Zebra Android 14 COBO STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-14-010100 - The Zebra Android 14 work profile must be configured to prevent users from adding personal email accounts to the work email app. | AirWatch - DISA Zebra Android 14 COPE STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-14-012400 - Zebra Android 14 must allow only the administrator (MDM) to perform the following management function: Disable Phone Hub - MDM to perform the following management function: Disable Phone Hub. | AirWatch - DISA Zebra Android 14 COBO STIG v1r2 | MDM | SYSTEM AND COMMUNICATIONS PROTECTION |
| ZEBR-14-013000 - Zebra Android 14 must disable the user's ability to wipe the device. | MobileIron - DISA Zebra Android 14 COBO STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-14-013100 - Zebra Android 14 must disable the use of assistants (including Zebra Assistant) unless required to meet Section 508 compliance requirements. | AirWatch - DISA Zebra Android 14 COBO STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-14-013200 - Zebra Android 14 must disable wireless printing. | AirWatch - DISA Zebra Android 14 COBO STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
| ZEBR-14-013200 - Zebra Android 14 must disable wireless printing. | MobileIron - DISA Zebra Android 14 COBO STIG v1r2 | MDM | CONFIGURATION MANAGEMENT |
