id: os_siri_server_logging_disable
title: Disallow Siri Server Side Logging
discussion: |
  The iOS built-in Siri service _MUST_ be disabled to prevent organizational data from being synchronized to Apple servers.

  Apple's Siri service does not provide an organization with enough control over the storage and access of data, and, therefore, automated synchronization _MUST_ be controlled by an organization approved service.
references:
  nist:
    cce:
      ios_27:
        - CCE-XXXXX-X
      ios_26:
        - CCE-95527-8
      ios_18:
        - CCE-94552-7
      ios_17:
        - CCE-93500-7
    800-53r5:
      - AC-20
      - CM-7
      - CM-7(1)
      - SC-7(10)
  bsi:
    indigo:
      ios_26:
        - ANNEX K
      ios_18:
        - ANNEX K
      ios_17:
        - ANNEX K
  disa:
    cmmc:
      - AC.L1-B.1.III
      - AC.L2-3.1.20
      - CM.L2-3.4.6
      - CM.L2-3.4.7
platforms:
  iOS:
    '27.0': {}
    '26.0':
      supervised: false
      benchmarks:
        - name: indigo_high
    '18.0':
      supervised: false
      benchmarks:
        - name: indigo_high
    '17.0':
      supervised: false
      benchmarks:
        - name: indigo_high
    introduced: '-1'
tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
  - cmmc_lvl1
  - cmmc_lvl2
  - cmmc_lvl3
  - cnssi-1253_moderate
  - cnssi-1253_low
  - cnssi-1253_high
mobileconfig_info:
  - PayloadType: com.apple.applicationaccess
    PayloadContent:
      - allowSiriServerLogging: false
