Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-25021 | WIR-iOS-003 | SV-30777r1_rule | ECWN-1 | Medium |
Description |
---|
The security posture of the iOS system depends on strict configuration management control of all software installed on the device, including operating system version. Otherwise, the security posture of the device, and the DoD enclave the device connects to, could be compromised. All iOS updates should be installed by the SA or under the control of the SA. |
STIG | Date |
---|---|
Apple iOS 4 (Good Mobility Suite) Interim Security Configuration Guide (ISCG) | 2011-11-07 |
Check Text ( C-31221r1_chk ) |
---|
Talk to the SA and ask what is the latest version of the iOS that has been approved for use on site-managed devices. -On a sample of site-managed iOS devices (pick 3-4 random devices), verify the iOS version installed on site-managed devices is not later than the approved version. --Log into the iOS device. --Go to Settings > General > About > Version. |
Fix Text (F-27692r1_fix) |
---|
The user will not download an iOS software update when prompted to do so by iTunes. |