2.2.1.3 Ensure 'Allow managed apps to store data in iCloud' is set to 'Disabled'

Information

This recommendation pertains to managed apps storing and syncing data through iCloud.

Rationale:

This recommendation addresses data leakage. It prevents a user from installing an app that is managed by the organization on a personal device and having iCloud sync the managed app data to the personal, non-managed app.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

1. Open Apple Configurator.
2. Open the Configuration Profile.
3. In the left windowpane, click on the 'Restrictions' tab.
4. In the right windowpane, under the tab 'Functionality', 'uncheck' the checkbox for 'Allow managed apps to store data in iCloud'.
5. Deploy the Configuration Profile.

Impact:

Syncing managed app data between multiple managed devices will not be possible.

See Also

https://workbench.cisecurity.org/files/1688

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv6|13

Plugin: MDM

Control ID: 11858b2dabd0c755f1750f4e42c2927dd8345e7847c19b54556953e9ce7c38c0