A managed photo app must be used to take and store work-related photos.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-228766	AIOS-14-010400	SV-228766r561031_rule		Medium

Description
The iOS Photos app is unmanaged and may sync photos with a device user's personal iCloud account. Therefore, work-related photos should not be taken via the iOS camera app or stored in the Photos app. A managed photo app should be used to take and manage work-related photos. SFR ID: NA

STIG	Date
Apple iOS/iPadOS 14 Security Technical Implementation Guide	2021-05-25

Details

Check Text ( C-31001r645690_chk )

Review configuration settings to confirm a managed photos app is installed on the iOS device. Valid exception to the requirement: If the AO has not approved a work camera app or the AO has not approved the use of the camera for work/mission activities, AND the site user agreement includes a statement that using the DoD iPhone to take work related photos is prohibited. This check procedure is performed on the iPhone and iPad. On the iPhone and iPad: 1. Open the Settings app. 2. Tap "General". 3. Tap "Profiles & Device Management" or "Profiles". 4. Tap the DoD Configuration Profile from the Apple iOS/iPadOS management tool. 5. Tap "Apps". 6. Verify a photo capture and management app is listed. If a managed photo capture and management app is not installed on the iPhone and iPad, this is a finding.

Fix Text (F-30978r509927_fix)
Install a managed photos app to take and manage work-related photos.