| 1.1.2 - AirWatch - Enable Passcode Lock - 'Passcode Required = true' | AirWatch - CIS Apple iOS 8 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 1.1.2 - AirWatch - Enable Passcode Lock - 'Passcode Required = true' | AirWatch - CIS Apple iOS 9 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 1.1.3 - AirWatch - Disallow Simple Passcode | AirWatch - CIS Apple iOS 8 v1.0.0 L2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| 1.1.3 - AirWatch - Disallow Simple Passcode | AirWatch - CIS Apple iOS 9 v1.0.0 L2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| 1.1.4 - AirWatch - Set Auto-lock - 'Inactivity Timeout <= 2' | AirWatch - CIS Apple iOS 9 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 1.1.6 - AirWatch - Disable Passcode Unlock for Fingerprints | AirWatch - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.10 - AirWatch - Turn Off AirDrop Discoverability | AirWatch - CIS Apple iOS 9 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.11 - AirWatch - Turn Off AirDrop Discoverability | AirWatch - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.18 - AirWatch - Disable View in Lock Screen for apps when device is locked | AirWatch - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.19 - AirWatch - Enable Automatic Downloads of App Updates | AirWatch - CIS Apple iOS 8 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 1.74 (L1) Ensure 'Configure the list of types that are excluded from synchronization' is set to 'Enabled' | CIS Microsoft Intune for Edge v1.0.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| 2.1.1 Ensure a 'Consent Message' has been 'Configured' | MobileIron - CIS Apple iOS 17 v1.1.0 End User Owned L1 | MDM | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 2.2.1 - AirWatch - Require passcode on device | AirWatch - CIS Apple iOS 8 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 2.2.1 - AirWatch - Require passcode on device | AirWatch - CIS Apple iOS 9 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 2.2.1.4 Ensure 'Force encrypted backups' is set to 'Enabled' | MobileIron - CIS Apple iOS 13 and iPadOS 13 v1.0.0 End User Owned L1 | MDM | CONTINGENCY PLANNING |
| 2.2.1.5 Ensure 'Allow personalized ads delivered by Apple' is set to 'Disabled' | MobileIron - CIS Apple iOS 17 v1.1.0 End User Owned L1 | MDM | CONFIGURATION MANAGEMENT |
| 2.2.1.7 Ensure 'Force automatic date and time' is set to 'Enabled' | MobileIron - CIS Apple iOS 17 v1.1.0 End User Owned L1 | MDM | AUDIT AND ACCOUNTABILITY |
| 2.2.1.14 Ensure 'Show Control Center in Lock screen' is set to 'Disabled' | MobileIron - CIS Apple iOS 17 v1.1.0 End User Owned L1 | MDM | ACCESS CONTROL |
| 2.2.2 - AirWatch - Do Not Allow Simple Value | AirWatch - CIS Apple iOS 8 v1.0.0 L1 | MDM | IDENTIFICATION AND AUTHENTICATION |
| 2.2.3 - AirWatch - Require alphanumeric value | AirWatch - CIS Apple iOS 8 v1.0.0 L2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| 2.2.3 - AirWatch - Require alphanumeric value | AirWatch - CIS Apple iOS 9 v1.0.0 L2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| 2.3.1 - AirWatch - Enable Prevent Move for Sensitive Mail Accounts | AirWatch - CIS Apple iOS 9 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 2.3.1 - AirWatch - Enable Prevent Move for Sensitive Mail Accounts | AirWatch - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 2.4.3 Ensure 'Minimum passcode length' is set to a value of '6' or greater | MobileIron - CIS Apple iOS 17 v1.1.0 End User Owned L1 | MDM | IDENTIFICATION AND AUTHENTICATION |
| 2.4.5 Ensure 'Maximum grace period for device lock' is set to 'Immediately' | MobileIron - CIS Apple iOS 17 v1.1.0 End User Owned L1 | MDM | ACCESS CONTROL |
| 3.1.1 - AirWatch - Enable 'Require password' | AirWatch - CIS Apple iOS 8 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 3.1.1 - AirWatch - Enable 'Require password' | AirWatch - CIS Apple iOS 9 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 7.3 Ensure base backups are configured and functional1 | CIS PostgreSQL 17 v1.1.0 L1 Database Unix | Unix | CONTINGENCY PLANNING |
| 17 - Securing NFS - Export policy rules | NetApp Security Hardening Guide for ONTAP 9 v1.7.0 | Netapp_API | |
| AIOS-05-080101 - Apple iOS must implement the management setting: not have any Family Members in Family Sharing. | MobileIron - DISA Apple iOS 10 v1r3 | MDM | CONFIGURATION MANAGEMENT |
| AIOS-13-003600 - Apple iOS/iPadOS must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device. | AirWatch - DISA Apple iOS/iPadOS 13 v2r1 | MDM | CONFIGURATION MANAGEMENT |
| AIOS-13-003600 - Apple iOS/iPadOS must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device. | MobileIron - DISA Apple iOS/iPadOS 13 v2r1 | MDM | CONFIGURATION MANAGEMENT |
| AIOS-16-008400 - Apple iOS/iPadOS 16 must be configured to display the DoD advisory warning message at startup or each time the user unlocks the device. | MobileIron - DISA Apple iOS-iPadOS 16 STIG v2r2 | MDM | ACCESS CONTROL |
| AIOS-18-014800 - Apple iOS/iPadOS 18 must be configured to disable 'Auto Unlock' of the iPhone by an Apple Watch - Auto Unlock of the iPhone by an Apple Watch. | MobileIron - DISA Apple iOS/iPadOS 18 v2r3 | MDM | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| AIOS-26-014800 - Apple iOS/iPadOS 26 must be configured to disable 'Auto Unlock' of the iPhone by an Apple Watch - Auto Unlock of the iPhone by an Apple Watch. | MobileIron - DISA Apple iOS/iPadOS 26 v1r3 | MDM | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| AIOS-98-080208 - Before establishing a user session, display an administrator-specified advisory notice and consent warning banner. | AirWatch - DISA Apple iOS 10 v1r3 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-17-005200 - Google Android 17 must be configured to lock the display after 15 minutes (or less) of inactivity. | AirWatch - DISA Google Android 17 COBO STIG v1r1 | MDM | ACCESS CONTROL |
| GOOG-17-005200 - Google Android 17 must be configured to lock the display after 15 minutes (or less) of inactivity. | MobileIron - DISA Google Android 17 COPE STIG v1r1 | MDM | ACCESS CONTROL |
| GOOG-17-005200 - Google Android 17 must be configured to lock the display after 15 minutes (or less) of inactivity. | MobileIron - DISA Google Android 17 COBO STIG v1r1 | MDM | ACCESS CONTROL |
| GOOG-17-006800 - Google Android 17 must be configured to display the DoW advisory warning message at startup or each time the user unlocks the device. | AirWatch - DISA Google Android 17 COPE STIG v1r1 | MDM | ACCESS CONTROL |
| GOOG-17-008600 - Google Android 17 must have the DoW root and intermediate PKI certificates installed. | AirWatch - DISA Google Android 17 COBO STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-17-009100 - The Google Android 17 work profile must be configured to disable the autofill services. | MobileIron - DISA Google Android 17 COBO STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-17-009100 - The Google Android 17 work profile must be configured to disable the autofill services. | MobileIron - DISA Google Android 17 COPE STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-17-009500 - Android 17 devices must be configured to disable the use of third-party keyboards. | AirWatch - DISA Google Android 17 COBO STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-17-009500 - Android 17 devices must be configured to disable the use of third-party keyboards. | MobileIron - DISA Google Android 17 COBO STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-17-009800 - Google Android 17 must allow only the administrator (EMM) to install/remove DoW root and intermediate PKI certificates. | AirWatch - DISA Google Android 17 COBO STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-17-009800 - Google Android 17 must allow only the administrator (EMM) to install/remove DoW root and intermediate PKI certificates. | MobileIron - DISA Google Android 17 COBO STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-17-009800 - Google Android 17 must allow only the administrator (EMM) to install/remove DoW root and intermediate PKI certificates. | AirWatch - DISA Google Android 17 COPE STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-17-009800 - Google Android 17 must allow only the administrator (EMM) to install/remove DoW root and intermediate PKI certificates. | MobileIron - DISA Google Android 17 COPE STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-17-010600 - Google Android 17 devices must have a Mobile Threat Detection (MTD) app installed. | MobileIron - DISA Google Android 17 COPE STIG v1r1 | MDM | CONFIGURATION MANAGEMENT |
