This is a supervised-only control. If the iPhone or iPad being reviewed is not supervised by the MDM, this control is automatically a finding (if the AO has not approved the use of Apple device camera). If the iPhone or iPad being reviewed is supervised by the MDM, follow these procedures: There are three possible use cases regarding camera use on a DOD iPhone or iPad: 1. Disable use of the camera devicewide – both unmanaged and managed use. 2. Allow camera use – both unmanaged and managed. In this case, the requirement is Not Applicable. 3. Disable camera use for unmanaged camera apps (e.g., iPhone camera app) but allow camera use for an approved managed camera app (e.g., Microsoft OneDrive). These check procedures are performed on the device management tool. Note: If an organization has multiple configuration profiles, the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review. **Use Case #1: In the iOS/iPadOS management tool, verify "Allow Camera" is unchecked. If the AO has not approved Apple device camera use and "Allow camera" is listed in the management tool, this is a finding. **Use Case #3: In the iOS/iPadOS management tool, verify "Allow Camera" is unchecked and "allowedCameraRestrictionBundleIDs" is configured with the Bundle ID of the approved managed camera app. If the AO has not approved Apple device camera use for unmanaged apps but has approved a specific managed camera app, and "Allow camera" is listed in the management tool or "allowedCameraRestrictionBundleIDs" is not configured with the approved managed camera app, this is a finding.