Apple iOS must implement the management setting: not share location data through iCloud.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-61947	AIOS-05-080102	SV-76437r1_rule		Medium

Description
Sharing of location data is an OPSEC risk because it potentially allows an adversary to determine a DoD user's location and movements and patterns in those movements over time. An adversary could use this information to target the user or to gather intelligence on the user's likely activities. Using commercial cloud services to store and handle location data could leave the data vulnerable to breach, particularly by sophisticated adversaries. Disabling the use of such services mitigates this risk. SFR ID: FMT_SMF_EXT.1.1 #45

Description

Sharing of location data is an OPSEC risk because it potentially allows an adversary to determine a DoD user's location and movements and patterns in those movements over time. An adversary could use this information to target the user or to gather intelligence on the user's likely activities. Using commercial cloud services to store and handle location data could leave the data vulnerable to breach, particularly by sophisticated adversaries. Disabling the use of such services mitigates this risk. SFR ID: FMT_SMF_EXT.1.1 #45

STIG	Date
Apple iOS 9 Interim Security Configuration Guide	2015-12-07

Details

Check Text ( C-62829r1_chk )
Review configuration settings to confirm "Share My Location" is disabled. This check procedure is performed on the Apple iOS device only. On the Apple iOS device: 1. Open the Settings app. 2. Tap "Privacy". 3. Tap "Location Services". 4. Tap "Share My Location". 5. Verify "Share My Location" is off. If "Share My Location" is toggled to the right and appears green on the Apple iOS device, this is a finding.

Check Text ( C-62829r1_chk )

Review configuration settings to confirm "Share My Location" is disabled.

This check procedure is performed on the Apple iOS device only.

On the Apple iOS device:
1. Open the Settings app.
2. Tap "Privacy".
3. Tap "Location Services".
4. Tap "Share My Location".
5. Verify "Share My Location" is off.

If "Share My Location" is toggled to the right and appears green on the Apple iOS device, this is a finding.

Fix Text (F-67865r1_fix)
The user must configure Apple iOS to disable location sharing through iCloud.