Skip to content

Apple iOS/iPadOS 15 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Apple iOS/iPadOS 15 must not allow backup to remote systems (managed applications data stored in iCloud).

    <VulnDiscussion>If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses...
    Rule Medium Severity
  • PP-MDF-321290

    <GroupDescription></GroupDescription>
    Group
  • PP-MDF-321280

    <GroupDescription></GroupDescription>
    Group
  • Apple iOS/iPadOS 15 must not allow backup to remote systems (iCloud).

    &lt;VulnDiscussion&gt;If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses...
    Rule Medium Severity
  • PP-MDF-321290

    <GroupDescription></GroupDescription>
    Group
  • Apple iOS/iPadOS 15 must not allow backup to remote systems (iCloud document and data synchronization).

    &lt;VulnDiscussion&gt;If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses...
    Rule Medium Severity
  • PP-MDF-321290

    <GroupDescription></GroupDescription>
    Group
  • Apple iOS/iPadOS 15 must not allow backup to remote systems (iCloud Keychain).

    &lt;VulnDiscussion&gt;If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses...
    Rule Medium Severity
  • PP-MDF-321290

    <GroupDescription></GroupDescription>
    Group
  • Apple iOS/iPadOS 15 must not allow backup to remote systems (My Photo Stream).

    &lt;VulnDiscussion&gt;If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses...
    Rule Medium Severity
  • PP-MDF-321290

    <GroupDescription></GroupDescription>
    Group
  • Apple iOS/iPadOS 15 must not allow backup to remote systems (iCloud Photo Sharing, also known as Shared Photo Streams).

    &lt;VulnDiscussion&gt;If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses...
    Rule Medium Severity
  • PP-MDF-321290

    <GroupDescription></GroupDescription>
    Group
  • Apple iOS/iPadOS 15 must not allow backup to remote systems (enterprise books).

    &lt;VulnDiscussion&gt;If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses...
    Rule Medium Severity
  • PP-MDF-321400

    <GroupDescription></GroupDescription>
    Group
  • Apple iOS/iPadOS 15 must [selection: wipe protected data, wipe sensitive data] upon unenrollment from MDM.

    &lt;VulnDiscussion&gt;When a mobile device is no longer going to be managed by MDM technologies, its protected/sensitive data must be sanitized bec...
    Rule Medium Severity
  • PP-MDF-321410

    <GroupDescription></GroupDescription>
    Group
  • Apple iOS/iPadOS 15 must [selection: remove Enterprise application, remove all noncore applications (any nonfactory-installed application)] upon unenrollment from MDM.

    &lt;VulnDiscussion&gt;When a mobile device is no longer going to be managed by MDM technologies, its protected/sensitive data must be sanitized bec...
    Rule Medium Severity
  • PP-MDF-323024

    <GroupDescription></GroupDescription>
    Group
  • Apple iOS/iPadOS 15 must be configured to enforce a minimum password length of six characters.

    &lt;VulnDiscussion&gt;Password strength is a measure of the effectiveness of a password in resisting guessing and brute force attacks. The ability ...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules