Ensure Listen for (Siri) Is Disabled

LowLevel 1Manual reviewmacos

Description

macOS includes the Siri digital assistant and if enabled it is always listening in case it is needed. In Sonoma a user may choose either "Hey Siri" or either "Siri" and "Hey Siri." In either case, Siri is using the microphone at all times to listen for instructions and then can record questions once activated.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

GUI: System Settings > General > Device Management > Verify that an installed profile has VoiceTriggerUserEnabled set to 0. Terminal: sudo /usr/bin/osascript -l JavaScript (JXA) reading NSUserDefaults suite com.apple.Siri, key VoiceTriggerUserEnabled

How it is fixed

Fix method: Guidance or infrastructure patch

Profile (preferred): com.apple.Siri set to VoiceTriggerUserEnabled = <false/>.

Properties

Operating systems: macos-26
Tags: macossystem-settings
Reference: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.5.2.2 Ensure Listen for (Siri) Is Disabled