V-288429

Discussion

If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DoW information systems. An adversary could exploit vulnerabilities created by the weaker configuration to compromise DoW sensitive information. Translation information could contain sensitive DoW information and therefore should not leave DoW control. SFR ID: FMT_SMF_EXT.1.1 #47

Check Content

Review configuration settings to confirm connections to Siri servers for the purpose of translation are disabled.

This check procedure is performed on both the MDM server and iPhone or iPad.

Note: If an organization has multiple configuration profiles, the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review.

In the MDM server, verify in the Declarative Device Management (DDM) configuration "Intelligence Settings" that "Force On-Device Only Translation" to set to "Yes".

On the iPhone and iPad:
1. Open the Settings app.
2. Tap "General".
3. Tap "VPN & Device Management".
4. Tap the Configuration Profile from the MDM server containing the policy.
5. Tap "Configurations" and then "Intelligence Settings".
6. Verify "Force On-Device Only Translation" is listed and set to "Yes".

If in the MDM server or iPhone/iPad "Force On-Device Only Translation" is not set to "Yes", this is a finding.