id: os_siri_user_generated_content_disable
title: Disallow User Generated Content with Siri
discussion: |
  The iOS built-in Siri service _MUST_ be disabled to prevent organizational data from being synchronized to Apple servers.

  Apple's Siri service does not provide an organization with enough control over the storage and access of data, and, therefore, automated synchronization _MUST_ be controlled by an organization approved service.
references:
  nist:
    cce:
      ios_27:
        - CCE-XXXXX-X
      ios_26:
        - CCE-95528-6
      ios_18:
        - CCE-94553-5
      ios_17:
        - CCE-93501-5
    800-53r5:
      - AC-20
      - CM-7
      - CM-7(1)
      - SC-7(10)
  disa:
    cci:
      - CCI-000366
    disa_stig:
      ios_26:
        - AIOS-26-016200
      ios_18:
        - AIOS-18-016200
    sfr:
      - 'FMT_MOF_EXT.1.2 #47'
    cmmc:
      - AC.L1-B.1.III
      - AC.L2-3.1.20
      - CM.L2-3.4.6
      - CM.L2-3.4.7
  bsi:
    indigo:
      ios_26:
        - ANNEX K
      ios_18:
        - ANNEX K
      ios_17:
        - ANNEX K
platforms:
  iOS:
    '27.0':
      supervised: true
    '26.0':
      supervised: true
      benchmarks:
        - name: ios_stig
        - name: indigo_base
        - name: indigo_high
    '18.0':
      supervised: true
      benchmarks:
        - name: indigo_base
        - name: indigo_high
    '17.0':
      supervised: true
      benchmarks:
        - name: indigo_base
        - name: indigo_high
    introduced: '7.0'
tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
  - cmmc_lvl1
  - cmmc_lvl2
  - cmmc_lvl3
  - cnssi-1253_moderate
  - cnssi-1253_low
  - cnssi-1253_high
mobileconfig_info:
  - PayloadType: com.apple.applicationaccess
    PayloadContent:
      - allowAssistantUserGeneratedContent: false
ddm_info:
  declarationtype: com.apple.configuration.siri.settings
  ddm_key: AllowUserGeneratedContent
  ddm_value: false
