What changed in Apple iOS 12 STIG V2R1V2R1 changes

Apple iOS 12 STIG V2R1 (2022-10-27) replaced V1R2 (2019-01-25): 40 checks added, 42 removed. It has 40 checks, against 42 in V1R2.

V2R1 checklistV1R2 checklist Compare V1R2 and V2R1 in STIG Compare

  • 40 added
  • 42 removed
  • 0 updated

Added in V2R1 (40)

  • V-237237CAT IIIApple iOS must be configured to enforce a minimum password length of six characters.
  • V-237238CAT IIIApple iOS must be configured to not allow passwords that include more than two repeating or sequential characters.
  • V-237239CAT IIApple iOS must be configured to lock the display after 15 minutes (or less) of inactivity.
  • V-237240CAT IIIApple iOS must be configured to not allow more than 10 consecutive failed authentication attempts.
  • V-237241CAT IIApple iOS must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: Apple App Store].
  • V-237242CAT IIApple iOS must not include applications with the following characteristics: Siri when the device is locked.
  • V-237243CAT IIApple iOS must not include applications with the following characteristics: Voice dialing application if available when MD is locked.
  • V-237244CAT IIApple iOS must not display notifications when the device is locked.
  • V-237245CAT IIApple iOS must not display notifications (calendar information) when the device is locked.
  • V-237246CAT IIIApple iOS must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.
  • V-237247CAT IIApple iOS must not allow backup of managed app data to locally connected systems.
  • V-237248CAT IIApple iOS must not allow backup to remote systems (iCloud).
  • V-237249CAT IIApple iOS must not allow backup to remote systems (iCloud document and data synchronization).
  • V-237250CAT IIApple iOS must not allow backup to remote systems (iCloud Keychain).
  • V-237251CAT IIApple iOS must not allow backup to remote systems (My Photo Stream).
  • V-237252CAT IIApple iOS must not allow backup to remote systems (iCloud Photo Sharing, also known as Shared Photo Streams).
  • V-237253CAT IIApple iOS must not allow backup to remote systems (managed applications data stored in iCloud).
  • V-237254CAT IIApple iOS must not allow backup to remote systems (enterprise books).
  • V-237255CAT IIApple iOS must not allow non-DoD applications to access DoD data.
  • V-237256CAT IApple iOS must require a valid password be successfully entered before the mobile device data is unencrypted.
  • V-237257CAT IIIApple iOS must implement the management setting: limit Ad Tracking.
  • V-237258CAT IIIApple iOS must implement the management setting: not allow automatic completion of Safari browser passcodes.
  • V-237259CAT IIApple iOS must implement the management setting: Encrypt iTunes backups.
  • V-237260CAT IIIApple iOS must implement the management setting: not allow use of Handoff.
  • V-237261CAT IIIApple iOS must implement the management setting: require the user to enter a password when connecting to an AirPlay-enabled device for the first time.
  • V-237262CAT IIApple iOS must implement the management setting: Disable Allow MailDrop.
  • V-237263CAT IIApple iOS must implement the management setting: Disable Allow Shared Albums.
  • V-237264CAT IApple iOS device must have the latest available iOS operating system installed.
  • V-237265CAT IIApple iOS must implement the management setting: use SSL for Exchange ActiveSync.
  • V-237266CAT IIApple iOS must implement the management setting: not allow messages in an ActiveSync Exchange account to be forwarded or moved to other accounts in the Apple iOS Mail app.
  • V-237267CAT IIApple iOS must implement the management setting: Treat Airdrop as an unmanaged destination.
  • V-237268CAT IIIApple iOS must implement the management setting: not have any Family Members in Family Sharing.
  • V-237269CAT IIApple iOS must implement the management setting: not share location data through iCloud.
  • V-237270CAT IIIApple iOS must implement the management setting: force Apple Watch wrist detection.
  • V-237271CAT IIApple iOS users must complete required training.
  • V-237272CAT IIA managed photo app must be used to take and store work related photos.
  • V-237273CAT IIApple iOS must implement the management setting: enable USB Restricted Mode.
  • V-237274CAT IIIApple iOS must not allow managed apps to write contacts to unmanaged contacts accounts.
  • V-237275CAT IIIApple iOS must not allow unmanaged apps to read contacts from managed contacts accounts.
  • V-254521CAT IAll Apple iOS 12 installations must be removed.

Removed since V1R2 (42)

  • V-81755CAT IIIApple iOS must be configured to enforce a minimum password length of six characters.
  • V-81757CAT IIIApple iOS must be configured to not allow passwords that include more than two repeating or sequential characters.
  • V-81759CAT IIApple iOS must be configured to lock the display after 15 minutes (or less) of inactivity.
  • V-81761CAT IIIApple iOS must be configured to not allow more than 10 consecutive failed authentication attempts.
  • V-81763CAT IIIIf an unmanaged third-party VPN client is installed on the iOS device, it must not be configured with a DoD network (work) VPN profile.
  • V-81765CAT IIApple iOS must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: Apple App Store].
  • V-81767CAT IIApple iOS must not include applications with the following characteristics: Siri when the device is locked.
  • V-81769CAT IIApple iOS must not include applications with the following characteristics: Voice dialing application if available when MD is locked.
  • V-81771CAT IIApple iOS must not display notifications when the device is locked.
  • V-81773CAT IIApple iOS must not display notifications (calendar information) when the device is locked.
  • V-81775CAT IIIApple iOS must be configured to display the DoD advisory warning message at start-up or each time the user unlocks the device.
  • V-81777CAT IIApple iOS must not allow backup of managed app data to locally connected systems.
  • V-81779CAT IIApple iOS must not allow backup to remote systems (iCloud).
  • V-81781CAT IIApple iOS must not allow backup to remote systems (iCloud document and data synchronization).
  • V-81783CAT IIApple iOS must not allow backup to remote systems (iCloud Keychain).
  • V-81787CAT IIApple iOS must not allow backup to remote systems (My Photo Stream).
  • V-81789CAT IIApple iOS must not allow backup to remote systems (iCloud Photo Sharing, also known as Shared Photo Streams).
  • V-81791CAT IIApple iOS must not allow backup to remote systems (managed applications data stored in iCloud).
  • V-81793CAT IIApple iOS must not allow backup to remote systems (enterprise books).
  • V-81795CAT IIApple iOS must not allow non-DoD applications to access DoD data.
  • V-81797CAT IIIApple iOS must be configured to disable automatic transfer of diagnostic data to an external device other than an MDM service with which the device has enrolled.
  • V-81799CAT IIApple iOS must implement the management setting: remove managed applications upon unenrollment from MDM (including sensitive and protected data).
  • V-81807CAT IApple iOS must require a valid password be successfully entered before the mobile device data is unencrypted.
  • V-81809CAT IIIApple iOS must implement the management setting: limit Ad Tracking.
  • V-81811CAT IIIApple iOS must implement the management setting: not allow automatic completion of Safari browser passcodes.
  • V-81813CAT IIApple iOS must implement the management setting: Encrypt iTunes backups.
  • V-81815CAT IIIApple iOS must implement the management setting: not allow use of Handoff.
  • V-81817CAT IIIApple iOS must implement the management setting: require the user to enter a password when connecting to an AirPlay-enabled device for the first time.
  • V-81819CAT IIApple iOS must implement the management setting: Disable Allow MailDrop.
  • V-81821CAT IIApple iOS must implement the management setting: Disable Allow Shared Albums.
  • V-81823CAT IApple iOS device must have the latest available iOS operating system installed.
  • V-81825CAT IIApple iOS must implement the management setting: use SSL for Exchange ActiveSync.
  • V-81827CAT IIApple iOS must implement the management setting: not allow messages in an ActiveSync Exchange account to be forwarded or moved to other accounts in the Apple iOS Mail app.
  • V-81829CAT IIApple iOS must implement the management setting: Treat Airdrop as an unmanaged destination.
  • V-81831CAT IIIApple iOS must implement the management setting: not have any Family Members in Family Sharing.
  • V-81833CAT IIApple iOS must implement the management setting: not share location data through iCloud.
  • V-81835CAT IIIApple iOS must implement the management setting: force Apple Watch wrist detection.
  • V-81837CAT IIApple iOS users must complete required training.
  • V-81839CAT IIA managed photo app must be used to take and store work related photos.
  • V-81841CAT IIApple iOS must implement the management setting: enable USB Restricted Mode.
  • V-81931CAT IIIApple iOS must not allow managed apps to write contacts to unmanaged contacts accounts.
  • V-81933CAT IIIApple iOS must not allow unmanaged apps to read contacts from managed contacts accounts.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R1 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.