id: icloud_enterprisebook_metadata_sync_disable
title: Preventing synchronization of enterprise book meta data.
discussion: |
  The iOS device _MUST_ be configured to prevent the synchronization of enterprise book meta data to Apple iCloud servers.

  Apple's iCloud service does not provide an organization with enough control over the storage and access of data and, therefore, password management and synchronization _MUST_ be controlled by an organization approved service.
references:
  nist:
    cce:
      ios_27:
        - CCE-XXXXX-X
      ios_26:
        - CCE-95633-4
      ios_18:
        - CCE-94566-7
      ios_17:
        - CCE-93467-9   
    800-53r5:
      - AC-20
      - AC-20(1)
      - CM-7
      - CM-7(1)
      - SC-7(10)
  bsi:
    indigo:
      ios_26:
        - ANNEX K
      ios_18:
        - ANNEX K
      ios_17:
        - ANNEX K        
  disa:
    cmmc:
      - AC.L1-B.1.III
      - AC.L2-3.1.20
      - CM.L2-3.4.6
      - CM.L2-3.4.7
platforms:
  iOS:
    '27.0': {}
    '26.0':
      benchmarks:
        - name: indigo_high
    '18.0':
      benchmarks:
        - name: indigo_high
    '17.0':
      benchmarks:
        - name: indigo_high        
    introduced: '8.0'
tags:
  - 800-53r5_low
  - 800-53r5_moderate
  - 800-53r5_high
  - cmmc_lvl1
  - cmmc_lvl2
  - cmmc_lvl3
  - cnssi-1253_moderate
  - cnssi-1253_low
  - cnssi-1253_high
mobileconfig_info:
  - PayloadType: com.apple.applicationaccess
    PayloadContent:
      - allowEnterpriseBookMetadataSync: false
