Check: AIOS-26-015400
Apple iOS/iPadOS 26 STIG:
AIOS-26-015400
(in version v1 r2)
Title
Apple iOS/iPadOS 26 must disable ChatGPT connection for Apple Intelligence. (Cat II impact)
Discussion
The ChatGPT feature of Apple Intelligence allows DOD information to be downloaded from the DOD iPhone/iPad and processed by the ChatGPT application in the cloud. The ChatGPT feature of Apple Intelligence increases the risk of compromise of sensitive DOD information. SFR ID: FMT_MOF_EXT.1.2 #47
Check Content
This check procedure is performed on the device management tool. Note: If an organization has multiple configuration profiles, the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review. In the iOS management tool, verify "Allow ChatGPT" is unchecked. Note: Each MDM/EMM server will define the exact label for the control to disable connections to cloud-based third-party artificial intelligence (AI) apps, including ChatGPT. If access to all cloud-based third-party AI apps, including ChatGPT is not disabled in the management tool, this is a finding.
Fix Text
Install a configuration profile to disable ChatGPT (and any other available third-party AI app) connection for Apple Intelligence. Configuration Profile Key: allowExternalIntelligenceIntegrations, allowExternalIntelligenceIntegrationsSignIn
Additional Identifiers
Rule ID: SV-278827r1150855_rule
Vulnerability ID: V-278827
Group Title: PP-MDF-993300
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000366 |
Implement the security configuration settings. |
Controls
| Number | Title |
|---|---|
| CM-6 |
Configuration Settings |