3.2.1.3 Ensure 'Allow Siri while device is locked' is set to 'Disabled'

Information

This recommendation pertains to access to Siri while the device is locked.

Rationale:

Accessing Siri on a locked device may allow unauthorized users to access information otherwise not available to them, such as messaging, contacts, and a variety of other data.

Impact:

The end user must unlock the device before interacting with Siri.

Solution

Open Apple Configurator.

Open the Configuration Profile.

In the left window pane, click on the Restrictions tab.

In the right window pane, under the tab Functionality, uncheck the checkbox for Allow Siri while device is locked.

Deploy the Configuration Profile.

See Also

https://workbench.cisecurity.org/benchmarks/6168