2.2.1.9 Ensure 'Allow Handoff' is set to 'Disabled'

Information

This recommendation pertains to Apple's Handoff data sharing mechanism.

Rationale:
Handoff does not enforce managed app boundaries. This allows managed app data to be moved to the unmanaged app space on another device, which may result in data leakage.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

1. Open Apple Configurator.
2. Open the Configuration Profile.
3. In the left windowpane, click on the Restrictions tab.
4. In the right windowpane, under the tab Functionality, uncheck the checkbox for Allow Handoff.
5. Deploy the Configuration Profile.

Impact:
End-users may be inconvenienced by disabling Handoff on their personal devices.

See Also

https://workbench.cisecurity.org/files/2141

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv6|14.4

Plugin: MDM

Control ID: f722c31698e160c170c1703e3f35d4339aba182cc6b2a036acfb25199f6597e9