Apple iOS 11 Security Technical Implementation Guide

The Apple iOS 11 Security Technical Implementation Guide (V1 R4) has 42 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

42STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R4

CurrentPublished Fri Oct 26 2018

A managed photo app must be used to take and store work related photos.

Apple iOS 11 Security Technical Implementation Guide

Assessment Title

Rule Text

A managed photo app must be used to take and store work related photos.

Description

Discussion Text

The iOS Photos app is unmanaged and may sync photo's with a device user's personal iCloud account. Therefore work related photos should not be taken via the iOS camera app or stored in the Photos app. A managed photo app should be used to take and manage work related photos.

SFR ID: NA

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-78441

Rule

SV-93147r1_rule

Severity

medium

Rule Version

AIOS-11-012900

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review configuration settings to confirm a managed photos app is installed on the iOS device.

This check procedure is performed on the Apple iOS device.

On the Apple iOS device:
1. Open the Settings app.
2. Tap "General".
3. Tap "Profiles & Device Management".
4. Tap the DoD Configuration Profile from the Apple iOS management tool.
5. Tap "Apps".
6. Verify a photo capture and management app is listed.

If a managed photo capture and management app is not installed on the iOS device, this is a finding.

Implementation Procedure

Fix Text

Install a managed photos app to take and manage work related photos.

STIG check 40 of 42 in the Apple iOS 11 STIG checklist

← Previous · V-78439If an unmanaged third-party VPN client is installed on the iOS device, it must not be configured with a DoD network (work) VPN profile.Next · V-78443 →Apple iOS must not allow backup to remote systems (managed applications data stored in iCloud).