mirror of
https://github.com/usnistgov/macos_security.git
synced 2026-02-03 14:03:24 +00:00
35 lines
857 B
YAML
35 lines
857 B
YAML
id: os_siri_assistant_disable
|
|
title: "Disable Siri service"
|
|
discussion: |
|
|
The iOS built-in Siri service _MUST_ be disabled to prevent organizational data from being synchronized to Apple servers.
|
|
|
|
Apple's Siri service does not provide an organization with enough control over the storage and access of data, and, therefore, automated synchronization _MUST_ be controlled by an organization approved service.
|
|
check: " "
|
|
fix: |
|
|
This is implemented by a Configuration Profile.
|
|
references:
|
|
cce:
|
|
- CCE-93499-2
|
|
800-53r5:
|
|
- AC-20
|
|
- CM-7
|
|
- CM-7(1)
|
|
- SC-7(10)
|
|
indigo:
|
|
- ANNEX K
|
|
iOS:
|
|
- "17.0"
|
|
tags:
|
|
- ios
|
|
- indigo_base
|
|
- indigo_high
|
|
- 800-53r5_low
|
|
- 800-53r5_moderate
|
|
- 800-53r5_high
|
|
severity: "high"
|
|
supervised: false
|
|
mobileconfig: true
|
|
mobileconfig_info:
|
|
com.apple.applicationaccess:
|
|
allowAssistant: false
|