III - Administrative Classified
Rules and Groups employed by this XCCDF Profile
-
PP-MDF-331090
Group -
Apple iOS/iPadOS 18 must allow the administrator (MDM) to perform the following management function: enable/disable VPN protection across the device and [selection: on a per-app basis, on a per-group of applications processes basis].
The system administrator must have the capability to configure VPN access to meet organization-specific policies based on mission needs. Otherwise, a user could inadvertently or maliciously set up ...Rule Low Severity -
PP-MDF-333250
Group -
Apple iOS/iPadOS 18 must not allow backup to remote systems (iCloud).
If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DOD information systems. An adversary could exploi...Rule Medium Severity -
PP-MDF-333250
Group -
Apple iOS/iPadOS 18 must not allow backup to remote systems (iCloud document and data synchronization).
If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DOD information systems. An adversary could exploi...Rule Medium Severity -
PP-MDF-333250
Group -
Apple iOS/iPadOS 18 must not allow backup to remote systems (iCloud Keychain).
If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DOD information systems. An adversary could exploi...Rule Medium Severity -
PP-MDF-333250
Group -
Apple iOS/iPadOS 18 must not allow backup to remote systems (Cloud Photo Library).
If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DOD information systems. An adversary could exploi...Rule Medium Severity -
PP-MDF-333250
Group -
Apple iOS/iPadOS 18 must not allow backup to remote systems (iCloud Photo Sharing, also known as Shared Stream or Shared Photo Stream).
If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DOD information systems. An adversary could exploi...Rule Medium Severity -
PP-MDF-333250
Group -
Apple iOS/iPadOS 18 must not allow backup to remote systems (managed applications data stored in iCloud).
If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DOD information systems. An adversary could exploi...Rule Medium Severity -
PP-MDF-333250
Group -
Apple iOS/iPadOS 18 must not allow backup to remote systems (enterprise books).
If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DOD information systems. An adversary could exploi...Rule Medium Severity -
PP-MDF-333024
Group -
Apple iOS/iPadOS 18 must be configured to enforce a minimum password length of six characters.
Password strength is a measure of the effectiveness of a password in resisting guessing and brute force attacks. The ability to crack a password is a function of how many attempts an adversary is p...Rule Medium Severity -
PP-MDF-333025
Group -
Apple iOS/iPadOS 18 must be configured to not allow passwords that include more than four repeating or sequential characters.
Password strength is a measure of the effectiveness of a password in resisting guessing and brute force attacks. Passwords that contain repeating or sequential characters are significantly easier t...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.