STIGUI
V-257095CAT III — Low severitySV-257095r904030_rule

The iOS/iPadOS 16 BYOAD must be configured to protect users' privacy, personal information, and applications.

Rule version AIOS-16-800120 · STIG v1 · 2023-08-14

Discussion

A key construct of a BYOAD is that user personal information and data are protected from exposure to the enterprise.

Reference: DOD policy "Use of Non-Government Mobile Devices". 3.b.(4), 3.b.(5).

SFR ID: FMT_SMF_EXT.1.1 #47

Check

Verify the EMM system has been configured to limit access to unmanaged data and apps on the iOS/iPadOS 16 BYOAD to protect users' privacy, personal information, and applications.

The exact procedure will depend on the EMM system used at the site.

If the BYOAD has not been configured to limit access to unmanaged data and apps on the iOS/iPadOS 16 BYOAD, this is a finding.

Fix

Configure the EMM system to limit access to unmanaged data and apps on the iOS/iPadOS 16 BYOAD to protect users' privacy, personal information, and applications.

The exact procedure will depend on the EMM system used at the site.

Identifiers

Group ID
V-257095
Group title
PP-BYO-000120
Rule ID
SV-257095r904030_rule
Check ID
C-60780r904028_chk
Fix ID
F-60721r904029_fix