iOS strictest published profile

Apple iOS/iPadOS 27 V1R1 + SP 800-53 High

Build from STIG mSCP branch Include CAT III Show check and fix text

Export the kept items Apply with Every field: check, fix, controls, registry, payloads, Intune and DISA's checklist. Untick an item, then Rebuild or export; the page starts from the owner's decisions, so an item marked not applying starts unticked. One section is drawn at a time; what you untick in one is kept when you open another, and every export covers the whole profile.

STIG rules: CAT I 4 kept

Every CAT I rule of Apple iOS/iPadOS 27 V1R1: the ones DISA rates most severe.

AIOS-27-006500 CAT I Apple iOS/iPadOS 27 must be configured to enforce a passcode reuse prohibition of at least two generations.
Recommended: apply IA-5(1)
AIOS-27-009400 CAT I All mobile operating system (MOS) cryptography must be configured to be in FIPS 140-3-validated mode.
Recommended: apply SC-13
AIOS-27-009500 CAT I Apple iOS/iPadOS 27 must require that a valid password be successfully entered before the mobile device data is unencrypted.
Recommended: apply SC-28
AIOS-27-010400 CAT I iPhone and iPad must have the latest available iOS/iPadOS operating system installed.
Recommended: apply CM-7