STIGQter STIGQter: STIG Summary: Apple visionOS 2 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 13 May 2026:

Apple Vision Pro hardware must not be modified to use the Developer Strap unless use is approved on a case-by-case basis by the authorizing official (AO).

DISA Rule

SV-276416r1146744_rule

Vulnerability Number

V-276416

Group Title

PP-MDF-993300

Rule Version

AVOS-02-015900

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Train AVP users to not connect and use the Developer Strap unless the AO has approved its use for a specific use case (refer to AVOS-02-011900). AO use approval must be documented and must detail specific use cases for which its use is approved.

Check Contents

Interview the site information system security officer (ISSO) and AVP users. Determine if the AVP Developer Strap is used at the site. If yes, verify the AO has approved its use by reviewing approval documentation. Verify AVP users are trained to not use the AVP developer Strap without AO approval (AVOS-02-011900).

If the AVP Developer Strap is used at the site without AO approval, this is a finding.

Vulnerability Number

V-276416

Documentable

False

Rule Version

AVOS-02-015900

Severity Override Guidance

Interview the site information system security officer (ISSO) and AVP users. Determine if the AVP Developer Strap is used at the site. If yes, verify the AO has approved its use by reviewing approval documentation. Verify AVP users are trained to not use the AVP developer Strap without AO approval (AVOS-02-011900).

If the AVP Developer Strap is used at the site without AO approval, this is a finding.

Check Content Reference

M

Target Key

5713