---
title: 'iOS 27.0: Security Configuration - cisv8'
description: |-
  This guide describes the actions to take when securing a iOS 27.0 system against the cisv8 security benchmark.

  Information System Security Officers and benchmark creators can use this catalog of settings in order to assist them in security benchmark creation. This list is a catalog, not a checklist or benchmark, and satisfaction of every item is not likely to be possible or sensible in many operational scenarios.
authors:
  - name: Bob Gendler
    organization: National Institute of Standards and Technology
  - name: Dan Brodjieski
    organization: National Aeronautics and Space Administration
  - name: Allen Golbig
    organization: Jamf
  - name: Edward Byrd
    organization: Center for Internet Security
parent_values: recommended
platform:
  os: iOS
  version: 27.0
profile:
  - section: iCloud
    rules:
      - icloud_backup_disabled
      - icloud_drive_disable
      - icloud_keychain_disable
      - icloud_managed_apps_store_data_disabled
      - icloud_photos_disable
  - section: Operating System
    rules:
      - os_account_modification_disable
      - os_airdrop_disable
      - os_airdrop_unmanaged_destination_enable
      - os_allow_documents_managed_sources_unmanaged_destinations_disable
      - os_allow_documents_unmanaged_sources_managed_destinations_disable
      - os_apple_watch_wrist_detection_enable
      - os_authentication_password_autofill_enable
      - os_diagnostics_reports_disable
      - os_erase_contents_and_settings_disable
      - os_external_intelligence_integration_sign_in_disable
      - os_files_network_drive_access_disable
      - os_files_usb_drive_access_disable
      - os_force_date_and_time_enable
      - os_force_encrypted_backups_enable
      - os_handoff_disable
      - os_install_configuration_profile_disable
      - os_install_vpn_configuration_disable
      - os_iphone_mirroring_disable
      - os_limit_ad_tracking_enable
      - os_mail_maildrop_disable
      - os_mail_move_messages_disable
      - os_mail_summary_disable
      - os_modify_cellular_data_app_settings_disable
      - os_new_device_proximity_disable
      - os_notes_transcription_summary_disable
      - os_on_device_dictation_enforce
      - os_pairing_non_configurator_hosts_disable
      - os_password_autofill_disable
      - os_password_proximity_disable
      - os_password_sharing_disable
      - os_personalized_advertising_disable
      - os_safari_cookies_set
      - os_safari_force_fraud_warning_enable
      - os_safari_password_autofill_disable
      - os_screenshots_disable
      - os_show_control_center_lock_screen_disable
      - os_show_notification_center_lock_screen_disable
      - os_siri_when_locked_disabled
      - os_untrusted_tls_disable
      - os_usb_accessories_when_locked_disable
      - os_voice_dialing_when_locked_disabled
      - os_writing_tools_disable
  - section: Password Policy
    rules:
      - pwpolicy_account_lockout_enforce
      - pwpolicy_alpha_numeric_enforce
      - pwpolicy_history_enforce
      - pwpolicy_max_grace_period_enforce
      - pwpolicy_max_inactivity_enforce
      - pwpolicy_minimum_length_enforce
      - pwpolicy_simple_sequence_disable
  - section: System Settings
    rules:
      - system_settings_siri_disable
  - section: Supplemental
    rules:
      - supplemental_cis_ios_manual
