BaselineWatch
Desk

AIOS-27-014100 Apple iOS 27 must disable recording cellphone calls on the iPhone.

DISA STIG library V1R1
All changes in this version
first version loaded CAT II

Maps to CM-6 via CCI-000366

Title

Apple iOS 27 must disable recording cellphone calls on the iPhone.

Control

This check procedure is performed on the device management tool and the iPhone. Note: If an organization has multiple configuration profiles, the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review. In the iOS management tool, verify "Allow call recording" is unchecked. On the iPhone: 1. Open the Settings app. 2. Tap "Apps". 3. Tap "Phone". 4. Verify "Audio Call Recording" is not shown. If "Allow Call Recording" is not disabled in the management tool or "Audio Call Recording" is available in Settings on the iPhone, this is a finding.

Discussion

Cellphone recordings are saved as unmanaged recordings in the Notes app, which may be accessible to unmanaged apps. There is a risk that sensitive DoW information can be recorded from a cellphone call, saved in Notes, and be accessible to an unmanaged App, which may expose sensitive DoW information. SFR ID: FMT_MOF_EXT.1.2 #47

Related controls

CCI-000366

Fix

Install a configuration profile to disable recording cellphone calls. Configuration Profile Key: allowCallRecording