PP-MDF-993300 Controls

STIG IDVersionTitleProduct
AIOS-18-006950V1R1Apple iOS/iPadOS 18 must be configured to enforce a passcode reuse prohibition of at least two generations.
AIOS-18-010400V1R1Apple iOS/iPadOS 18 must require a valid password be successfully entered before the mobile device data is unencrypted.
AIOS-18-010500V1R1Apple iOS/iPadOS 18 must implement the management setting: limit Ad Tracking.
AIOS-18-010600V1R1Apple iOS/iPadOS 18 must implement the management setting: not allow automatic completion of Safari browser passcodes.
AIOS-18-010700V1R1Apple iOS/iPadOS 18 must implement the management setting: encrypt backups/Encrypt local backup.
AIOS-18-010800V1R1Apple iOS/iPadOS 18 must implement the management setting: not allow use of Handoff.
AIOS-18-010850V1R1Apple iOS/iPadOS 18 must implement the management setting: not allow use of iPhone widgets on Mac.
AIOS-18-010900V1R1Apple iOS/iPadOS 18 must implement the management setting: require the user to enter a password when connecting to an AirPlay-enabled device.
AIOS-18-010950V1R1Apple iOS/iPadOS 18 must implement the management setting: require passcode for incoming Airplay connection requests.
AIOS-18-011000V1R1Apple iOS/iPadOS 18 must implement the management setting: disable Allow MailDrop.
AIOS-18-011200V1R1iPhone and iPad must have the latest available iOS/iPadOS operating system installed.
AIOS-18-011300V1R1Apple iOS/iPadOS 18 must implement the management setting: use SSL for Exchange ActiveSync.
AIOS-18-011400V1R1Apple iOS/iPadOS 18 must implement the management setting: not allow messages in an ActiveSync Exchange account to be forwarded or moved to other accounts in the Apple iOS/iPadOS 18 Mail app.
AIOS-18-011500V1R1Apple iOS/iPadOS 18 must implement the management setting: treat AirDrop as an unmanaged destination.
AIOS-18-011600V1R1Apple iOS/iPadOS 18 must implement the management setting: not have any Family Members in Family Sharing.
AIOS-18-011700V1R1Apple iOS/iPadOS 18 must implement the management setting: not share location data through iCloud.
AIOS-18-011800V1R1Apple iOS/iPadOS 18 must implement the management setting: force Apple Watch wrist detection.
AIOS-18-011900V1R1Apple iOS/iPadOS 18 users must complete required training.
AIOS-18-012000V1R1A managed photo app must be used to take and store work-related photos.
AIOS-18-012200V1R1Apple iOS/iPadOS 18 must implement the management setting: enable USB Restricted Mode.
AIOS-18-012300V1R1Apple iOS/iPadOS 18 must not allow managed apps to write contacts to unmanaged contacts accounts.
AIOS-18-012400V1R1Apple iOS/iPadOS 18 must not allow unmanaged apps to read contacts from managed contacts accounts.
AIOS-18-012500V1R1Apple iOS/iPadOS 18 must implement the management setting: disable AirDrop.
AIOS-18-012600V1R1Apple iOS/iPadOS 18 must implement the management setting: disable paired Apple Watch.
AIOS-18-012650V1R1Apple iOS/iPadOS 18 must implement the management setting: approved Apple Watches must be managed by an MDM.
AIOS-18-012700V1R1Apple iOS/iPadOS 18 must disable "Password AutoFill" in browsers and applications.
AIOS-18-012800V1R1Apple iOS/iPadOS 18 must disable "Allow setting up new nearby devices".
AIOS-18-012900V1R1Apple iOS/iPadOS 18 must disable password proximity requests.
AIOS-18-013000V1R1Apple iOS/iPadOS 18 must disable password sharing.
AIOS-18-013100V1R1Apple iOS/iPadOS 18 must disable "Find My Friends" in the "Find My" app.
AIOS-18-013200V1R1The Apple iOS/iPadOS 18 must be supervised by the MDM.
AIOS-18-013400V1R1The Apple iOS must be configured to disable automatic transfer of diagnostic data to an external device other than an MDM service with which the device has enrolled.
AIOS-18-013500V1R1Apple iOS must implement the management setting: not allow a user to remove Apple iOS configuration profiles that enforce DOD security requirements.
AIOS-18-014300V1R1Apple iOS/iPadOS 18 must disable "Allow network drive access in Files access".
AIOS-18-014400V1R1Apple iOS/iPadOS 18 must disable connections to Siri servers for the purpose of dictation.
AIOS-18-014500V1R1Apple iOS/iPadOS 18 must disable connections to Siri servers for the purpose of translation.
AIOS-18-014600V1R1Apple iOS/iPadOS 18 must disable copy/paste of data from managed to unmanaged applications.
AIOS-18-014800V1R1Apple iOS/iPadOS 18 must be configured to disable "Auto Unlock" of the iPhone by an Apple Watch.
AIOS-18-014900V1R1Apple iOS/iPadOS 18 must disable the installation of alternative marketplace apps.
AIOS-18-015000V1R1Apple iOS/iPadOS 18 must disable app installation from a website.
AIOS-18-015100V1R1Apple iOS/iPadOS 18 must delete eSIM content when the device is erased.
AIOS-18-015400V1R1Apple iOS/iPadOS 18 must disable ChatGPT connection for Apple Intelligence.
AIOS-18-015500V1R1Apple iOS/iPadOS 18 must disable the download of iOS/iPadOS beta updates.