STIGhubSTIGhub
STIGhub— A free STIG search and compliance tool·STIGs updated just now
Powered by Pylon·Privacy·Terms·Feedback·© 2026 Beacon Cloud Solutions, Inc.
← Back to Apple iOS/iPadOS 27 Security Technical Implementation Guide

V-288439

CAT II (Medium)

Apple iOS 27 must disable recording cellphone calls on the iPhone.

Rule ID

SV-288439r1287853_rule

STIG

Apple iOS/iPadOS 27 Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-000366

Discussion

Cellphone recordings are saved as unmanaged recordings in the Notes app, which may be accessible to unmanaged apps. There is a risk that sensitive DoW information can be recorded from a cellphone call, saved in Notes, and be accessible to an unmanaged App, which may expose sensitive DoW information. SFR ID: FMT_MOF_EXT.1.2 #47

Check Content

This check procedure is performed on the device management tool and the iPhone.

Note: If an organization has multiple configuration profiles, the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review.

In the iOS management tool, verify "Allow call recording" is unchecked.

On the iPhone:
1. Open the Settings app.
2. Tap "Apps".
3. Tap "Phone".
4. Verify "Audio Call Recording" is not shown. 

If "Allow Call Recording" is not disabled in the management tool or "Audio Call Recording" is available in Settings on the iPhone, this is a finding.

Fix Text

Install a configuration profile to disable recording cellphone calls.

Configuration Profile Key: allowCallRecording