Check: AIOS-17-012000
Apple iOS/iPadOS 17 STIG:
AIOS-17-012000
(in version v1 r1)
Title
A managed photo app must be used to take and store work-related photos. (Cat II impact)
Discussion
The iOS Photos app is unmanaged and may sync photos with a device user's personal iCloud account. Therefore, work-related photos must not be taken via the iOS camera app or stored in the Photos app. A managed photo app must be used to take and manage work-related photos. SFR ID: NA
Check Content
Review configuration settings to confirm a managed photos app is installed on the iOS device. This check procedure is performed on the iPhone and iPad. On the iPhone and iPad: 1. Open the Settings app. 2. Tap "General". 3. Tap "VPN & Device Management". 4. Tap the DOD Configuration Profile from the Apple iOS/iPadOS management tool. 5. Tap "Apps". 6. Verify a photo capture and management app is listed. If a managed photo capture and management app is not installed on the iPhone and iPad, this is a finding.
Fix Text
Install a managed photos app to take and manage work-related photos.
Additional Identifiers
Rule ID: SV-258355r927748_rule
Vulnerability ID: V-258355
Group Title: PP-MDF-993300
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000097 |
The organization restricts or prohibits the use of organization-controlled portable storage devices by authorized individuals on external information systems. |
Controls
| Number | Title |
|---|---|
| AC-20 (2) |
Portable Storage Devices |