AIOS-14-000100 - The mobile operating system must be configured to enforce a minimum password length of six characters.

800-53|IA-5(1)(a)

CAT|II

CCI|CCI-000205

Rule-ID|SV-228729r561031_rule

STIG-ID|AIOS-14-000100

Vuln-ID|V-228729

AIOS-14-000200 - The mobile operating system must be configured to not allow passwords that include more than two repeating or sequential characters.

800-53|CM-6b.

CCI|CCI-000366

Rule-ID|SV-228730r561031_rule

STIG-ID|AIOS-14-000200

Vuln-ID|V-228730

AIOS-14-000300 - The mobile operating system must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.

800-53|AC-11a.

CCI|CCI-000057

Rule-ID|SV-228731r561031_rule

STIG-ID|AIOS-14-000300

Vuln-ID|V-228731

AIOS-14-000400 - The mobile operating system must be configured to not allow more than ten consecutive failed authentication attempts.

800-53|AC-7a.

CCI|CCI-000044

Rule-ID|SV-228732r561031_rule

STIG-ID|AIOS-14-000400

Vuln-ID|V-228732

AIOS-14-000500 - The mobile operating system must provide the capability for the Administrator (MDM) to perform the following management function: enable/disable VPN protection across the device and [selection: other methods].

800-53|AC-17b.

800-53|CM-6(1)

CAT|III

CCI|CCI-000066

CCI|CCI-000370

Rule-ID|SV-228733r561031_rule

STIG-ID|AIOS-14-000500

Vuln-ID|V-228733

AIOS-14-000700 - The mobile operating system must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DoD-approved commercial app repository, MDM server, mobile application store].

800-53|CM-11b.

CCI|CCI-001806

Rule-ID|SV-228734r852627_rule

STIG-ID|AIOS-14-000700

Vuln-ID|V-228734

AIOS-14-001000 - Apple iOS/iPadOS must not include applications with the following characteristics: access to Siri when the device is locked.

800-53|AC-17(2)

CCI|CCI-000068

Rule-ID|SV-228735r561031_rule

STIG-ID|AIOS-14-001000

Vuln-ID|V-228735

AIOS-14-001100 - The mobile operating system whitelist must be configured to not include applications with the following characteristics: voice dialing application if available when MD is locked.

Rule-ID|SV-228736r852628_rule

STIG-ID|AIOS-14-001100

Vuln-ID|V-228736

AIOS-14-001500 - The mobile operating system must be configured to not display notifications when the device is locked.

800-53|AC-8a.

CCI|CCI-000051

Rule-ID|SV-228737r561040_rule

STIG-ID|AIOS-14-001500

Vuln-ID|V-228737

AIOS-14-001600 - Apple iOS/iPadOS must not display notifications (calendar information) when the device is locked.

Rule-ID|SV-228738r561104_rule

STIG-ID|AIOS-14-001600

Vuln-ID|V-228738

AIOS-14-003300 - The mobile operating system must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.

CCI|CCI-000048

Rule-ID|SV-228739r561044_rule

STIG-ID|AIOS-14-003300

Vuln-ID|V-228739

AIOS-14-003600 - The mobile operating system must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

800-53|AC-20(2)

CCI|CCI-000097

Rule-ID|SV-228740r561031_rule

STIG-ID|AIOS-14-003600

Vuln-ID|V-228740

AIOS-14-003700 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud).

Rule-ID|SV-228741r561031_rule

STIG-ID|AIOS-14-003700

Vuln-ID|V-228741

AIOS-14-003800 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud document and data synchronization).

Rule-ID|SV-228742r561031_rule

STIG-ID|AIOS-14-003800

Vuln-ID|V-228742

AIOS-14-003900 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud Keychain).

Rule-ID|SV-228743r561031_rule

STIG-ID|AIOS-14-003900

Vuln-ID|V-228743

AIOS-14-004000 - Apple iOS/iPadOS must not allow backup to remote systems (My Photo Stream).

Rule-ID|SV-228744r561031_rule

STIG-ID|AIOS-14-004000

Vuln-ID|V-228744

AIOS-14-004100 - Apple iOS/iPadOS must not allow backup to remote systems (iCloud Photo Sharing, also known as Shared Photo Streams).

Rule-ID|SV-228745r561031_rule

STIG-ID|AIOS-14-004100

Vuln-ID|V-228745

AIOS-14-004200 - Apple iOS/iPadOS must not allow backup to remote systems (managed applications data stored in iCloud).

Rule-ID|SV-228746r561031_rule

STIG-ID|AIOS-14-004200

Vuln-ID|V-228746

AIOS-14-004300 - Apple iOS/iPadOS must not allow backup to remote systems (enterprise books).

Rule-ID|SV-228747r561031_rule

STIG-ID|AIOS-14-004300

Vuln-ID|V-228747

AIOS-14-005200 - Apple iOS/iPadOS must not allow non-DoD applications to access DoD data.

800-53|AC-4(2)

CCI|CCI-002191

Rule-ID|SV-228748r852629_rule

STIG-ID|AIOS-14-005200

Vuln-ID|V-228748

AIOS-14-007600 - Apple iOS/iPadOS must implement the management setting: remove managed applications upon unenrollment from MDM (including sensitive and protected data).

800-53|SC-28

CCI|CCI-001199

Rule-ID|SV-244559r734148_rule

STIG-ID|AIOS-14-007600

Vuln-ID|V-244559

AIOS-14-008800 - Apple iOS/iPadOS must require a valid password be successfully entered before the mobile device data is unencrypted.

CAT|I

Rule-ID|SV-228750r561031_rule

STIG-ID|AIOS-14-008800

Vuln-ID|V-228750

AIOS-14-008900 - Apple iOS/iPadOS must implement the management setting: limit Ad Tracking.

Rule-ID|SV-228751r561031_rule

STIG-ID|AIOS-14-008900

Vuln-ID|V-228751

AIOS-14-009000 - Apple iOS/iPadOS must implement the management setting: not allow automatic completion of Safari browser passcodes.

800-53|CM-7a.

CCI|CCI-000381

Rule-ID|SV-228752r561031_rule

STIG-ID|AIOS-14-009000

Vuln-ID|V-228752

AIOS-14-009100 - Apple iOS/iPadOS must implement the management setting: Encrypt iTunes backups/Encrypt local backup.

Rule-ID|SV-228753r561031_rule

STIG-ID|AIOS-14-009100

Vuln-ID|V-228753

AIOS-14-009200 - Apple iOS/iPadOS must implement the management setting: not allow use of Handoff.

Rule-ID|SV-228754r561031_rule

STIG-ID|AIOS-14-009200

Vuln-ID|V-228754

AIOS-14-009300 - Apple iOS/iPadOS must implement the management setting: require the user to enter a password when connecting to an AirPlay-enabled device for the first time.

800-53|AC-17a.

CCI|CCI-000063

Rule-ID|SV-228755r561031_rule

STIG-ID|AIOS-14-009300

Vuln-ID|V-228755

AIOS-14-009400 - Apple iOS/iPadOS must implement the management setting: Disable Allow MailDrop.

800-53|AC-17(1)

CCI|CCI-002314

Rule-ID|SV-228756r852630_rule

STIG-ID|AIOS-14-009400

Vuln-ID|V-228756

AIOS-14-009500 - Apple iOS/iPadOS must implement the management setting: Disable Allow Shared Albums.

Rule-ID|SV-228757r561031_rule

STIG-ID|AIOS-14-009500

Vuln-ID|V-228757

AIOS-14-009600 - iPhone and iPad must have the latest available iOS/iPadOS operating system installed.

Rule-ID|SV-228758r561031_rule

STIG-ID|AIOS-14-009600

Vuln-ID|V-228758

AIOS-14-009700 - Apple iOS/iPadOS must implement the management setting: use SSL for Exchange ActiveSync.

800-53|IA-2

CCI|CCI-000764

Rule-ID|SV-228759r561031_rule

STIG-ID|AIOS-14-009700

Vuln-ID|V-228759

AIOS-14-009800 - Apple iOS/iPadOS must implement the management setting: not allow messages in an ActiveSync Exchange account to be forwarded or moved to other accounts in the Apple iOS/iPadOS Mail app.

Rule-ID|SV-228760r561031_rule

STIG-ID|AIOS-14-009800

Vuln-ID|V-228760

AIOS-14-009900 - Apple iOS/iPadOS must implement the management setting: Treat AirDrop as an unmanaged destination.

800-53|IA-5(14)

CCI|CCI-002008

Rule-ID|SV-228761r852631_rule

STIG-ID|AIOS-14-009900

Vuln-ID|V-228761

AIOS-14-010000 - Apple iOS/iPadOS must implement the management setting: not have any Family Members in Family Sharing.

Rule-ID|SV-228762r852632_rule

STIG-ID|AIOS-14-010000

Vuln-ID|V-228762

AIOS-14-010100 - Apple iOS/iPadOS must implement the management setting: not share location data through iCloud.

Rule-ID|SV-228763r561046_rule

STIG-ID|AIOS-14-010100

Vuln-ID|V-228763

AIOS-14-010200 - Apple iOS/iPadOS must implement the management setting: force Apple Watch wrist detection.

Rule-ID|SV-228764r561031_rule

STIG-ID|AIOS-14-010200

Vuln-ID|V-228764

AIOS-14-010300 - Apple iOS/iPadOS users must complete required training.

Rule-ID|SV-228765r561031_rule

STIG-ID|AIOS-14-010300

Vuln-ID|V-228765

AIOS-14-010400 - A managed photo app must be used to take and store work-related photos.

Rule-ID|SV-228766r561031_rule

STIG-ID|AIOS-14-010400

Vuln-ID|V-228766

AIOS-14-010600 - Apple iOS/iPadOS must implement the management setting: enable USB Restricted Mode.

Rule-ID|SV-228767r561031_rule

STIG-ID|AIOS-14-010600

Vuln-ID|V-228767

AIOS-14-010700 - Apple iOS/iPadOS must not allow managed apps to write contacts to unmanaged contacts accounts.

Rule-ID|SV-228768r561031_rule

STIG-ID|AIOS-14-010700

Vuln-ID|V-228768

AIOS-14-010800 - Apple iOS/iPadOS must not allow unmanaged apps to read contacts from managed contacts accounts.

Detections

Analytics

AirWatch - DISA Apple iOS/iPadOS 14 v1r3

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous