STIGhubSTIGhub
STIGsRMF ControlsCompare

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • RMF Controls
  • Compare Versions

Resources

  • About
  • Release Notes
  • VPAT
  • DISA STIG Library
STIGs updated 5 hours ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← AC-20 (2) — Use of External Systems

CCI-000097

Definition

Restrict the use of organization-controlled portable storage devices by authorized individuals on external systems using organization-defined restrictions.

Parent Control

AC-20 (2)Use of External SystemsAccess Control

Linked STIG Checks (50)

V-254580CAT IIApple iOS/iPadOS 16 must not allow backup to remote systems (iCloud document and data synchronization).Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254581CAT IIApple iOS/iPadOS 16 must not allow backup to remote systems (iCloud Keychain).Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254582CAT IIApple iOS/iPadOS 16 must not allow backup to remote systems (My Photo Stream).Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254583CAT IIApple iOS/iPadOS 16 must not allow backup to remote systems (iCloud Photo Sharing, also known as Shared Photo Streams).Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254584CAT IIApple iOS/iPadOS 16 must not allow backup to remote systems (managed applications data stored in iCloud).Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254622CAT IIA managed photo app must be used to take and store work-related photos.Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254623CAT IIApple iOS/iPadOS 16 must implement the management setting: Enable USB Restricted Mode.Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254626CAT IIIApple iOS/iPadOS 16 must implement the management setting: Disable AirDrop.Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254627CAT IIApple iOS/iPadOS 16 must implement the management setting: Disable paired Apple Watch.Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254628CAT IIApple iOS/iPadOS 16 must disable Password AutoFill in browsers and applications.Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254629CAT IIApple iOS/iPadOS 16 must disable allow setting up new nearby devices.Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254630CAT IIApple iOS/iPadOS 16 must disable password proximity requests.Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254631CAT IIApple iOS/iPadOS 16 must disable password sharing.Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254632CAT IIIApple iOS/iPadOS 16 must disable Find My Friends in the Find My app.Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254633CAT IIThe Apple iOS/iPadOS 16 must be supervised by the MDM.Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254634CAT IIApple iOS/iPadOS 16 must disable "Allow USB drive access in Files app" if the authorizing official (AO) has not approved the use of DoD-approved USB storage drives with iOS/iPadOS devices.Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254637CAT IIApple iOS/iPadOS 16 must disable "Allow network drive access in Files access".Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254638CAT IIApple iOS/iPadOS 16 must disable connections to Siri servers for the purpose of dictation.Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254639CAT IIApple iOS/iPadOS 16 must disable connections to Siri servers for the purpose of translation.Apple iOS-iPadOS 16 Security Technical Implementation GuideV-254640CAT IIApple iOS/iPadOS 16 must disable copy/paste of data from managed to unmanaged applications.Apple iOS-iPadOS 16 Security Technical Implementation GuideV-257105CAT IIApple iOS/iPadOS 16 must not allow backup to remote systems (managed applications data stored in iCloud).Apple iOS/iPadOS 16 BYOAD Security Technical Implementation GuideV-257129CAT IIA managed photo app must be used to take and store work-related photos.Apple iOS/iPadOS 16 BYOAD Security Technical Implementation GuideV-257133CAT IIApple iOS/iPadOS 16 must disable copy/paste of data from managed to unmanaged applications.Apple iOS/iPadOS 16 BYOAD Security Technical Implementation GuideV-259761CAT IIApple iOS/iPadOS 17 must not allow backup to remote systems (managed applications data stored in iCloud).Apple iOS/iPadOS 17 MDFPP 3.3 BYOAD Security Technical Implementation GuideV-259788CAT IIA managed photo app must be used to take and store work-related photos.Apple iOS/iPadOS 17 MDFPP 3.3 BYOAD Security Technical Implementation GuideV-259792CAT IIApple iOS/iPadOS 17 must disable copy/paste of data from managed to unmanaged applications.Apple iOS/iPadOS 17 MDFPP 3.3 BYOAD Security Technical Implementation GuideV-258355CAT IIA managed photo app must be used to take and store work-related photos.Apple iOS/iPadOS 17 Security Technical Implementation GuideV-258356CAT IIApple iOS/iPadOS 17 must implement the management setting: enable USB Restricted Mode.Apple iOS/iPadOS 17 Security Technical Implementation GuideV-258359CAT IIIApple iOS/iPadOS 17 must implement the management setting: disable AirDrop.Apple iOS/iPadOS 17 Security Technical Implementation GuideV-258360CAT IIApple iOS/iPadOS 17 must implement the management setting: disable paired Apple Watch.Apple iOS/iPadOS 17 Security Technical Implementation GuideV-258361CAT IIApple iOS/iPadOS 17 must implement the management setting: approved Apple Watches must be managed by an MDM.Apple iOS/iPadOS 17 Security Technical Implementation GuideV-258362CAT IIApple iOS/iPadOS 17 must disable "Password AutoFill" in browsers and applications.Apple iOS/iPadOS 17 Security Technical Implementation GuideV-258363CAT IIApple iOS/iPadOS 17 must disable allow setting up new nearby devices.Apple iOS/iPadOS 17 Security Technical Implementation GuideV-258364CAT IIApple iOS/iPadOS 17 must disable password proximity requests.Apple iOS/iPadOS 17 Security Technical Implementation GuideV-258365CAT IIApple iOS/iPadOS 17 must disable password sharing.Apple iOS/iPadOS 17 Security Technical Implementation GuideV-258366CAT IIIApple iOS/iPadOS 17 must disable "Find My Friends" in the "Find My" app.Apple iOS/iPadOS 17 Security Technical Implementation GuideV-258367CAT IIThe Apple iOS/iPadOS 17 must be supervised by the MDM.Apple iOS/iPadOS 17 Security Technical Implementation GuideV-258371CAT IIApple iOS/iPadOS 17 must disable "Allow network drive access in Files access".Apple iOS/iPadOS 17 Security Technical Implementation GuideV-258372CAT IIApple iOS/iPadOS 17 must disable connections to Siri servers for the purpose of dictation.Apple iOS/iPadOS 17 Security Technical Implementation GuideV-258373CAT IIApple iOS/iPadOS 17 must disable connections to Siri servers for the purpose of translation.Apple iOS/iPadOS 17 Security Technical Implementation GuideV-258374CAT IIApple iOS/iPadOS 17 must disable copy/paste of data from managed to unmanaged applications.Apple iOS/iPadOS 17 Security Technical Implementation GuideV-259187CAT IIApple iOS/iPadOS 17 must not allow backup to remote systems (iCloud document and data synchronization).Apple iOS/iPadOS 17 Security Technical Implementation GuideV-259188CAT IIApple iOS/iPadOS 17 must not allow backup to remote systems (iCloud Keychain).Apple iOS/iPadOS 17 Security Technical Implementation GuideV-259189CAT IIApple iOS/iPadOS 17 must not allow backup to remote systems (Cloud Photo Library).Apple iOS/iPadOS 17 Security Technical Implementation GuideV-259190CAT IIApple iOS/iPadOS 17 must not allow backup to remote systems (iCloud Photo Sharing, also known as Shared Stream or Shared Photo Stream).Apple iOS/iPadOS 17 Security Technical Implementation GuideV-259191CAT IIApple iOS/iPadOS 17 must not allow backup to remote systems (managed applications data stored in iCloud).Apple iOS/iPadOS 17 Security Technical Implementation GuideV-259193CAT IIApple iOS/iPadOS 17 must disable "Allow USB drive access in Files app" if the authorizing official (AO) has not approved the use of DOD-approved USB storage drives with iOS/iPadOS devices.Apple iOS/iPadOS 17 Security Technical Implementation GuideV-235048CAT IIThe Honeywell Mobility Edge Android Pie device must be configured to not allow backup of [all applications, configuration data] to locally connected systems.Honeywell Android 9.x COBO Security Technical Implementation GuideV-235076CAT IIThe Honeywell Mobility Edge Android Pie device must be configured to not allow backup of [all applications, configuration data] to locally connected systems.Honeywell Android 9.x COPE Security Technical Implementation GuideV-252864CAT IIZebra Android 11 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.Zebra Android 11 COBO Security Technical Implementation Guide