CCI-000060 in U Apple iOS-iPadOS 18 V1R1

ℹ️ The items you can view are limited because you do not have a subscription. Contact us at [email protected] to purchase one.

UNCLASSIFIED

Group Title

PP-MDF-333080

Group ID

V-267998

Rule Version

AIOS-18-007500

Rule Title

Apple iOS/iPadOS 18 must be configured to not display notifications when the device is locked.

Rule ID

SV-267998r1031178_rule

Rule Severity

● Medium

Rule Weight

10.0

Vuln Discussion

Many mobile devices display notifications on the lock screen so users can obtain relevant information in a timely manner without having to frequently unlock the phone to determine if there are new notifications. However, in many cases, these notifications can contain sensitive information. When they are available on the lock screen, an adversary can see them merely by being in close physical proximity to the device. Configuring the mobile operating system to not send notifications to the lock screen mitigates this risk.

SFRID: FMT_SMF.1.1 #18

Documentable

False

Check Content

Review configuration settings to confirm the display of notifications when the device is locked has been disabled.

This check procedure is performed on the Apple iOS/iPadOS management tool and mobile device.

In the Apple iOS/iPadOS management tool, for each managed app, verify the app is configured to disable Notifications preview.

On the iPhone and iPad:

1. Open the Settings app.

2. Tap "General".

3. Tap "VPN & Device Management".

4. Tap the Configuration Profile from the iOS management tool containing the management policy.

5. Tap "Apps".

6. Tap an app and verify "Disallow notification view in locked screen" is listed.

Repeat steps 5 and 6 for each managed app in the list.

If one or more managed apps are not set to disable showing notification view on locked screen, this is a finding.

Check System

C-71922r1031033_chk

Fix Reference

F-71825r1031034_fix

Fix Text

Install a configuration profile to disable the display of notifications when the device is locked.

Install a configuration profile to disable Notification Center from the device Lock screen.

Identities

CCI-000060

Conceal, via the device lock, information previously visible on the display with a publicly viewable image.

800-53 :: AC-11 (1)
800-53 Rev. 4 :: AC-11 (1)
800-53 Rev. 5 :: AC-11 (1)
800-53A :: AC-11 (1).1

Group Title

PP-MDF-333080

Group ID

V-267999

Rule Version

AIOS-18-007600

Rule Title

Apple iOS/iPadOS 18 must not display notifications (calendar information) when the device is locked.

Rule ID

SV-267999r1031179_rule

Rule Severity

● Medium

Rule Weight

10.0

Vuln Discussion

SFRID: FMT_SMF.1.1 #18

Documentable

False

Check Content

Review configuration settings to confirm "Show Today view in Lock screen" is disabled.

This check procedure is performed on both the Apple iOS/iPadOS management tool and the iPhone and iPad.

Note: If an organization has multiple configuration profiles, the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review.

In the Apple iOS/iPadOS management tool, verify "Show Today view in Lock screen" is unchecked.

Alternatively, verify the text "<key>allowLockScreenTodayView</key><false/>" appears in the configuration profile (.mobileconfig file).

On the iPhone and iPad:

1. Open the Settings app.

2. Tap "General".

3. Tap "Profiles & Device Management" or Profiles".

4. Tap the Configuration Profile from the iOS management tool containing the management policy.

5. Tap "Restrictions".

6. Verify "Today view on lock screen not allowed" is present.

If "Show Today view in Lock screen" is checked in the Apple iOS/iPadOS management tool, "<key>allowLockScreenTodayView</key><true/>" appears in the configuration profile, or the restrictions policy on the iPhone and iPad does not list "Today view on lock screen not allowed", this is a finding.