EAST GREENBUSH, N.Y.--(EON: Enhanced Online News)--The Center for Internet Security (CIS) today announces its new guidelines on how to securely program iOS 7 to mitigate IT security-related vulnerabilities, just two weeks after the release of Apple’s new operating system. The CIS Apple iOS 7 Benchmark provides specific, step-by-step recommendations for securing numerous settings on millions of devices already running iOS 7, including the iPhone, iPad, iPad Mini and iPod Touch.
“The consensus team did an incredible job in putting together such a comprehensive and insightful set of security configuration recommendations in this new benchmark”
The benchmark builds upon the iOS 5 and 6 benchmarks previously released by CIS and leveraged the expertise gained through those processes to ensure guidance was available for users as soon as the iOS 7 software was released. The recommendations help mitigate configuration-related vulnerabilities associated with the passcode and lock screen settings, including the passcode bypass and TouchID, Apple’s new fingerprint identification technology. Also addressed are the vulnerabilities associated with the Safari web browser, as well as networking-related issues with the WiFi, Bluetooth, Hotspot, and AirDrop features. The benchmark provides practical recommendations that provide clear security benefits while taking into account functionality requirements.
The CIS iOS 7 Benchmark was developed in collaboration with a community of users, vendors, and subject matter experts through a unique consensus-based process for which CIS has become internationally recognized. CIS gives special acknowledgment to David Skrdla, who authored the benchmark and helped lead its development.
The CIS Apple iOS 7 Benchmark is available for download at: http://benchmarks.cisecurity.org/downloads/show-single/?file=appleios7.100
“The consensus team did an incredible job in putting together such a comprehensive and insightful set of security configuration recommendations in this new benchmark,” said Rick Comeau, CIS Security Benchmarks Division executive director. “To be able to make available such a valuable security resource to the millions of people using this newly released technology is a great achievement—and even more so when considering this benchmark not only covers traditional configuration vulnerabilities associated with default settings, but also addresses critical threats targeting iOS 7 that emerged immediately after its release.”
The CIS Apple iOS 7 Benchmark is the latest benchmark released by CIS as a means to help secure the most commonly used IT systems and technologies. CIS currently offers more than 80 benchmarks across a broad array of technologies, including desktop and server operating systems, mobile devices and web browsers, all of which are available for free in PDF format.
For more information about the benchmarks and other security resources available through the CIS Security Benchmarks program, visit CIS at: http://benchmarks.cisecurity.org
About the Center for Internet Security
The Center for Internet Security (CIS) is a 501c3 nonprofit organization focused on enhancing the cyber security readiness and response of public and private sector entities, with a commitment to excellence through collaboration. CIS produces consensus-based, best practice secure configuration benchmarks and security automation content, and serves as the key cyber security resource for state, local, territorial and tribal governments, including chief information security officers, homeland security advisors and fusion centers. CIS provides products and resources that help partners achieve security goals through expert guidance and cost-effective solutions. To learn more please visit cisecurity.org or follow us at @CISecurity.