id: system_settings_siri_AI_disable
title: Disable Siri AI
discussion: |
  Support for Siri and Siri AI is non-essential and _MUST_ be disabled to prevent organizational data from being synchronized to Apple servers. 

  Apple's Siri service does not provide an organization with enough control over the storage and access of data, and, therefore, automated synchronization _MUST_ be controlled by an organization approved service. Apple Intelligence features such as Siri AI that use off device AI _MUST_ be disabled.

  The information system _MUST_ be configured to provide only essential capabilities.
references:
  nist:
    cce:
      macos_27:
        - CCE-XXXXX-X      
      ios_27:
        - CCE-XXXXX-X
      visionos_27:
        - CCE-XXXXX-X
    800-53r5:
      - AC-20
      - CM-7
      - CM-7(1)
      - SC-7(10)
    800-171r3:
      - 03.01.20
      - 03.04.06
      - 03.04.08
  disa:
    cci:
      - CCI-000381
      - CCI-001774
    srg:
      - SRG-OS-000095-GPOS-00049  
    cmmc:
      - AC.L1-B.1.III
      - AC.L1-3.1.20
      - CM.L2-3.4.6
      - CM.L2-3.4.7
    sfr:
      - 'FMT_MOF_EXT.1.2 #47'
  hhs:
    hicp:
      - 2.L.A
  cis:
    controls_v8:
      - 4.1
      - 4.8
platforms:
  macOS:
    '27.0': {}    
    enforcement_info:
      check:
        shell: |-
          /usr/bin/osascript -l JavaScript << EOS
          $.NSUserDefaults.alloc.initWithSuiteName('com.apple.ironwood.support')\
          .objectForKey('allowSiri3489').js
          EOS
        result:
          string: 'false'
    introduced: '27.0'
  iOS:
    '27.0': {}
    introduced: '27.0'
  visionOS:
    '27.0': {}
    introduced: '27.0'
tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
  - 800-171
  - cisv8
  - cnssi-1253_low
  - cnssi-1253_high
  - cmmc_lvl3
  - cmmc_lvl2
  - cmmc_lvl1
  - cnssi-1253_moderate
  - hicp_lp
ddm_info:
  declarationtype: com.apple.configuration.siri.settings
  ddm_key: AllowSiriAI
  ddm_value: false
