PP-MDF-993300 Controls

STIG ID Version Title Product
AIOS-18-006950 V1R1 Apple iOS/iPadOS 18 must be configured to enforce a passcode reuse prohibition of at least two generations.
AIOS-18-010400 V1R1 Apple iOS/iPadOS 18 must require a valid password be successfully entered before the mobile device data is unencrypted.
AIOS-18-010500 V1R1 Apple iOS/iPadOS 18 must implement the management setting: limit Ad Tracking.
AIOS-18-010600 V1R1 Apple iOS/iPadOS 18 must implement the management setting: not allow automatic completion of Safari browser passcodes.
AIOS-18-010700 V1R1 Apple iOS/iPadOS 18 must implement the management setting: encrypt backups/Encrypt local backup.
AIOS-18-010800 V1R1 Apple iOS/iPadOS 18 must implement the management setting: not allow use of Handoff.
AIOS-18-010850 V1R1 Apple iOS/iPadOS 18 must implement the management setting: not allow use of iPhone widgets on Mac.
AIOS-18-010900 V1R1 Apple iOS/iPadOS 18 must implement the management setting: require the user to enter a password when connecting to an AirPlay-enabled device.
AIOS-18-010950 V1R1 Apple iOS/iPadOS 18 must implement the management setting: require passcode for incoming Airplay connection requests.
AIOS-18-011000 V1R1 Apple iOS/iPadOS 18 must implement the management setting: disable Allow MailDrop.
AIOS-18-011200 V1R1 iPhone and iPad must have the latest available iOS/iPadOS operating system installed.
AIOS-18-011300 V1R1 Apple iOS/iPadOS 18 must implement the management setting: use SSL for Exchange ActiveSync.
AIOS-18-011400 V1R1 Apple iOS/iPadOS 18 must implement the management setting: not allow messages in an ActiveSync Exchange account to be forwarded or moved to other accounts in the Apple iOS/iPadOS 18 Mail app.
AIOS-18-011500 V1R1 Apple iOS/iPadOS 18 must implement the management setting: treat AirDrop as an unmanaged destination.
AIOS-18-011600 V1R1 Apple iOS/iPadOS 18 must implement the management setting: not have any Family Members in Family Sharing.
AIOS-18-011700 V1R1 Apple iOS/iPadOS 18 must implement the management setting: not share location data through iCloud.
AIOS-18-011800 V1R1 Apple iOS/iPadOS 18 must implement the management setting: force Apple Watch wrist detection.
AIOS-18-011900 V1R1 Apple iOS/iPadOS 18 users must complete required training.
AIOS-18-012000 V1R1 A managed photo app must be used to take and store work-related photos.
AIOS-18-012200 V1R1 Apple iOS/iPadOS 18 must implement the management setting: enable USB Restricted Mode.
AIOS-18-012300 V1R1 Apple iOS/iPadOS 18 must not allow managed apps to write contacts to unmanaged contacts accounts.
AIOS-18-012400 V1R1 Apple iOS/iPadOS 18 must not allow unmanaged apps to read contacts from managed contacts accounts.
AIOS-18-012500 V1R1 Apple iOS/iPadOS 18 must implement the management setting: disable AirDrop.
AIOS-18-012600 V1R1 Apple iOS/iPadOS 18 must implement the management setting: disable paired Apple Watch.
AIOS-18-012650 V1R1 Apple iOS/iPadOS 18 must implement the management setting: approved Apple Watches must be managed by an MDM.
AIOS-18-012700 V1R1 Apple iOS/iPadOS 18 must disable "Password AutoFill" in browsers and applications.
AIOS-18-012800 V1R1 Apple iOS/iPadOS 18 must disable "Allow setting up new nearby devices".
AIOS-18-012900 V1R1 Apple iOS/iPadOS 18 must disable password proximity requests.
AIOS-18-013000 V1R1 Apple iOS/iPadOS 18 must disable password sharing.
AIOS-18-013100 V1R1 Apple iOS/iPadOS 18 must disable "Find My Friends" in the "Find My" app.
AIOS-18-013200 V1R1 The Apple iOS/iPadOS 18 must be supervised by the MDM.
AIOS-18-013400 V1R1 The Apple iOS must be configured to disable automatic transfer of diagnostic data to an external device other than an MDM service with which the device has enrolled.
AIOS-18-013500 V1R1 Apple iOS must implement the management setting: not allow a user to remove Apple iOS configuration profiles that enforce DOD security requirements.
AIOS-18-014300 V1R1 Apple iOS/iPadOS 18 must disable "Allow network drive access in Files access".
AIOS-18-014400 V1R1 Apple iOS/iPadOS 18 must disable connections to Siri servers for the purpose of dictation.
AIOS-18-014500 V1R1 Apple iOS/iPadOS 18 must disable connections to Siri servers for the purpose of translation.
AIOS-18-014600 V1R1 Apple iOS/iPadOS 18 must disable copy/paste of data from managed to unmanaged applications.
AIOS-18-014800 V1R1 Apple iOS/iPadOS 18 must be configured to disable "Auto Unlock" of the iPhone by an Apple Watch.
AIOS-18-014900 V1R1 Apple iOS/iPadOS 18 must disable the installation of alternative marketplace apps.
AIOS-18-015000 V1R1 Apple iOS/iPadOS 18 must disable app installation from a website.
AIOS-18-015100 V1R1 Apple iOS/iPadOS 18 must delete eSIM content when the device is erased.
AIOS-18-015400 V1R1 Apple iOS/iPadOS 18 must disable ChatGPT connection for Apple Intelligence.
AIOS-18-015500 V1R1 Apple iOS/iPadOS 18 must disable the download of iOS/iPadOS beta updates.