Skip to content

III - Administrative Classified

Rules and Groups employed by this XCCDF Profile

  • PP-MDF-990000

    Group
  • Apple iOS/iPadOS 16 must implement the management setting: Not have any Family Members in Family Sharing.

    Apple's Family Sharing service allows Apple iOS/iPadOS users to create a Family Group whose members have several shared capabilities, including the ability to lock, wipe, play a sound on, or locate...
    Rule Low Severity
  • PP-MDF-990000

    Group
  • Apple iOS/iPadOS 16 must implement the management setting: Not share location data through iCloud.

    Sharing of location data is an operational security (OPSEC) risk because it potentially allows an adversary to determine a DoD user's location, movements, and patterns in those movements over time....
    Rule Medium Severity
  • PP-MDF-990000

    Group
  • Apple iOS/iPadOS 16 must implement the management setting: Force Apple Watch wrist detection.

    Because Apple Watch is a personal device, it is key that any sensitive DoD data displayed on the Apple Watch cannot be viewed when the watch is not in the immediate possession of the user. This con...
    Rule Low Severity
  • PP-MDF-990000

    Group
  • Apple iOS/iPadOS 16 users must complete required training.

    The security posture on iOS devices requires the device user to configure several required policy rules on their device. User-Based Enforcement (UBE) is required for these controls. In addition, if...
    Rule Medium Severity
  • PP-MDF-990000

    Group
  • A managed photo app must be used to take and store work-related photos.

    The iOS Photos app is unmanaged and may sync photos with a device user's personal iCloud account. Therefore, work-related photos must not be taken via the iOS camera app or stored in the Photos app...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules