AIOS-02-080101 - Apple iOS must not allow backup to remote systems (enterprise books).

Information

Enterprise books may contain DoD-sensitive information. When enterprise books are backed up, they are vulnerable to attacks on the backup systems and media. Disabling the backup capability mitigates this risk. If such books are lost, accidentally deleted, or corrupted for any reason, they can be easily retrieved from the original source.

Solution

Install a configuration profile to prevent backup of enterprise books that could contain DoD-sensitive information.

See Also

http://iasecontent.disa.mil/stigs/zip/U_Apple_iOS_10_V1R3_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-86465r1_rule, STIG-ID|AIOS-02-080101, Vuln-ID|V-71841

Plugin: MDM

Control ID: 8b29b9c47d95ce2cc3f71ec6333f6c98312b23c8da147ba45832839542af04c1