STIGQter: STIG Summary: Apple iOS/iPadOS 14 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 23 Apr 2021:

A managed photo app must be used to take and store work-related photos.

DISA Rule

SV-228766r645691_rule

Vulnerability Number

V-228766

Group Title

PP-MDF-991000

Rule Version

AIOS-14-010400

Severity

CAT II

CCI(s)

• CCI-000097 - The organization restricts or prohibits the use of organization-controlled portable storage devices by authorized individuals on external information systems.

Weight

10

Fix Recommendation

Install a managed photos app to take and manage work-related photos.

Check Contents

Review configuration settings to confirm a managed photos app is installed on the iOS device.

Valid exception to the requirement: If the AO has not approved a work camera app or the AO has not approved the use of the camera for work/mission activities, AND the site user agreement includes a statement that using the DoD iPhone to take work related photos is prohibited.

This check procedure is performed on the iPhone and iPad.

On the iPhone and iPad:
1. Open the Settings app.
2. Tap "General".
3. Tap "Profiles & Device Management" or "Profiles".
4. Tap the DoD Configuration Profile from the Apple iOS/iPadOS management tool.
5. Tap "Apps".
6. Verify a photo capture and management app is listed.

If a managed photo capture and management app is not installed on the iPhone and iPad, this is a finding.

Vulnerability Number

V-228766

Documentable

False

Rule Version

AIOS-14-010400

Severity Override Guidance

Review configuration settings to confirm a managed photos app is installed on the iOS device.

Valid exception to the requirement: If the AO has not approved a work camera app or the AO has not approved the use of the camera for work/mission activities, AND the site user agreement includes a statement that using the DoD iPhone to take work related photos is prohibited.

This check procedure is performed on the iPhone and iPad.

On the iPhone and iPad:
1. Open the Settings app.
2. Tap "General".
3. Tap "Profiles & Device Management" or "Profiles".
4. Tap the DoD Configuration Profile from the Apple iOS/iPadOS management tool.
5. Tap "Apps".
6. Verify a photo capture and management app is listed.

If a managed photo capture and management app is not installed on the iPhone and iPad, this is a finding.

Check Content Reference

M

Target Key

4231

Comments