BaselineWatch
Desk

system_settings_improve_assistive_voice_disable Disable Sending Audio Recordings and Transcripts to Apple

NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
first version loaded System Settings

Title

Disable Sending Audio Recordings and Transcripts to Apple

Control

/usr/bin/osascript -l JavaScript << EOS
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.Accessibility')\
.objectForKey('AXSAudioDonationSiriImprovementEnabled').js
EOS

Discussion

The ability for Apple to store and review audio of your audio recordings and transcripts of your vocal shortcuts and voice control interactions _MUST_ be disabled. This will disable "Improve Assistive Voice Features" in Privacy & Security within System Settings.

The information system _MUST_ be configured to provide only essential capabilities. Disabling the submission of this information will mitigate the risk of unwanted data being sent to Apple.

Related controls

ac-20, cm-7, cm-7.1, sc-7.10

Fix

This is implemented by a Configuration Profile.