Audit iCloud Drive

LowLevel 2Manual reviewmacos

Description

iCloud Drive is Apple's storage solution for applications on both macOS and iOS to use the same files that are resident in Apple's cloud storage. The iCloud Drive folder is available much like Dropbox, Microsoft OneDrive, or Google Drive. One of the concerns in public cloud storage is that proprietary data may be inappropriately stored in an end user's personal repository.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

GUI: System Settings > General > Device Management > Verify that an installed profile has Disallow iCloud Drive set to your organization's requirements. Terminal: sudo /usr/bin/osascript -l JavaScript (JXA) reading NSUserDefaults suite com.apple.applicationaccess, key allowCloudDocumentSync If the output is false, iCloud Drive Sync is disabled. If the output is true, iCloud Drive sync is enabled.

How it is fixed

Fix method: Guidance or infrastructure patch

Profile (preferred): com.apple.applicationaccess allowCloudDocumentSync.

Properties

Operating systems: macos-26
Tags: macossystem-settings
Reference: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.1.1.2 Audit iCloud Drive