Rule ID
SV-288439r1287853_rule
Version
V1R1
CCIs
Cellphone recordings are saved as unmanaged recordings in the Notes app, which may be accessible to unmanaged apps. There is a risk that sensitive DoW information can be recorded from a cellphone call, saved in Notes, and be accessible to an unmanaged App, which may expose sensitive DoW information. SFR ID: FMT_MOF_EXT.1.2 #47
This check procedure is performed on the device management tool and the iPhone. Note: If an organization has multiple configuration profiles, the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review. In the iOS management tool, verify "Allow call recording" is unchecked. On the iPhone: 1. Open the Settings app. 2. Tap "Apps". 3. Tap "Phone". 4. Verify "Audio Call Recording" is not shown. If "Allow Call Recording" is not disabled in the management tool or "Audio Call Recording" is available in Settings on the iPhone, this is a finding.
Install a configuration profile to disable recording cellphone calls. Configuration Profile Key: allowCallRecording