Apple iOS must implement the management setting: force Apple Watch wrist detection.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-61961	AIOS-11-080203	SV-76451r1_rule		Low

Description
As a personal device, it is key that any DoD sensitive data displayed on the Apple Watch not be viewable when the watch is not in the immediate possession of the user. This control ensures the Apple Watch screen locks when the user takes the watch off, therefore, protecting sensitive DoD data from possible exposure. SFR ID: FMT_SMF_EXT.1.1 #45

STIG	Date
Apple iOS 9 Interim Security Configuration Guide	2015-12-07

Details

Check Text ( C-62843r1_chk )
Review configuration settings to confirm “Force Apple Watch wrist detection" is enabled. This check procedure is performed on both the Apple iOS management tool and the Apple iOS device. Note: If an organization has multiple configuration profiles, then the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review. In the Apple iOS management tool, verify ""Wrist detection enforced on Apple Watch" is enforced. On the Apple iOS device: 1. Open the Settings app. 2. Tap "General". 3. Tap "Profiles" or "Profiles & Device Management" or "Device Management". 4. Tap the Configuration Profile from the Apple iOS management tool containing the restrictions policy. 5. Tap "Restrictions". 6. Verify "Wrist detection enforced on Apple Watch" is listed. If "Wrist detection enforced on Apple Watch" is not enforced in the Apple iOS management tool or is not listed on the Apple iOS device, this is a finding.

Check Text ( C-62843r1_chk )

Review configuration settings to confirm “Force Apple Watch wrist detection" is enabled.

This check procedure is performed on both the Apple iOS management tool and the Apple iOS device.

Note: If an organization has multiple configuration profiles, then the check procedure must be performed on the relevant configuration profiles applicable to the scope of the review.

In the Apple iOS management tool, verify ""Wrist detection enforced on Apple Watch" is enforced.

On the Apple iOS device:
1. Open the Settings app.
2. Tap "General".
3. Tap "Profiles" or "Profiles & Device Management" or "Device Management".
4. Tap the Configuration Profile from the Apple iOS management tool containing the restrictions policy.
5. Tap "Restrictions".
6. Verify "Wrist detection enforced on Apple Watch" is listed.

If "Wrist detection enforced on Apple Watch" is not enforced in the Apple iOS management tool or is not listed on the Apple iOS device, this is a finding.

Fix Text (F-67879r1_fix)
Install a Configuration Profile to force Apple Watch wrist detection.