V-288428

Discussion

If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DoW information systems. An adversary could exploit vulnerabilities created by the weaker configuration to compromise DoW sensitive information. Dictation information could contain sensitive DoW information and therefore should not leave DoW control. SFR ID: FMT_SMF_EXT.1.1 #47

Check Content

Review configuration settings to confirm connections to Siri servers for the purpose of dictation are disabled.

This check procedure is performed on both the MDM server and iPhone or iPad.

Note: If an organization has multiple configuration profiles, the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review.

In the MDM server, verify in the Declarative Device Management (DDM) configuration "Intelligence Settings" that "Force On-Device Only Dictation" is set to "Yes".

On the iPhone and iPad:
1. Open the Settings app.
2. Tap "General".
3. Tap "VPN & Device Management".
4. Tap the Configuration Profile from the MDM server containing the policy.
5. Tap "Configurations" and then "Intelligence Settings".
6. Verify "Force On-Device Only Dictation" is listed and set to "Yes".

If in the MDM server or the iPhone/iPad "Force On-Device Only Dictation" is not set to "Yes", this is a finding.