BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

AIOS-27-011200 A managed photo app must be used to take and store work-related photos.

DISA STIG library V1R1
All changes in this version
first version loaded CAT II

Maps to CM-6 via CCI-000366

Title

A managed photo app must be used to take and store work-related photos.

Control

Review configuration settings to confirm a managed photos app is installed on the iOS device. This check procedure is performed on the iPhone and iPad. On the iPhone and iPad: 1. Open the Settings app. 2. Tap "General". 3. Tap "VPN & Device Management". 4. Tap the DoW Configuration Profile from the Apple iOS/iPadOS management tool. 5. Tap "Apps". 6. Verify a photo capture and management app is listed. 7. Verify the app is managed and stores photos as managed data. If a managed photo capture and management app is not installed on the iPhone and iPad and/or the app is not managed and does not store photos as managed data, this is a finding. Note: The recommended app is Microsoft OneDrive. (Refer to the DoW Mobility Unclassified Capability [DMUC] "iOS & iPadOS Microsoft OneDrive Photo and Video Capture Quick Reference Guide" for more information.) Note: If the Apple device camera is disabled (refer to AIOS-27-016200), with AO approval, use the Apple iOS/iPadOS key "allowedCameraRestrictionBundleIDs" to enable an approved managed camera app.

Discussion

The iOS Photos app is unmanaged and may sync photos with a device or user's personal iCloud account. Therefore, work-related photos must not be taken via the iOS camera app or stored in the Photos app. A managed photo app must be used to take and manage work-related photos. SFR ID: NA

Related controls

CCI-000366

Fix

Install a managed photos app to take and manage work-related photos. Note: The recommended app is Microsoft OneDrive. (Refer to the DoW Mobility Unclassified Capability [DMUC] "iOS & iPadOS Microsoft OneDrive Photo and Video Capture Quick Reference Guide" for more information.) Note: If the Apple device camera is disabled (refer to AIOS-27-016200), with AO approval, use the Apple iOS/iPadOS key "allowedCameraRestrictionBundleIDs" to enable an approved managed camera app. Note: The app must be managed and must store photos as managed data.