Ensure On-Device Dictation Is Enabled

低レベル 1自動macos

説明

In macOS 14.0 Sonoma, Apple released the ability to limit dictation to staying on-device and not sending data to the Siri servers. The use of dictation is likely to include editing documents with confidential information. While Apple does have controls to obfuscate voice data that exists on their servers, it is recommended that Dictation-collected information does not leave the local Mac. Sending data from dictation to the Siri servers could allow data spillage to occur. From a control perspective, it is much safer to ensure information of various levels of confidentiality is retained locally.

チェック方法

監査方法: シェルコマンド

shell

/usr/bin/osascript -l JavaScript <<'EOS'
$.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess').objectForKey('forceOnDeviceOnlyDictation').js
EOS

期待される出力: true

修正方法

修正方法: ガイダンスまたは IaC パッチ

Profile Method: Create or edit a configuration profile with the following information: 1. The PayloadType string is com.apple.applicationaccess 2. The key to include is forceOnDeviceOnlyDictation 3. The key must be set to <true/>

プロパティ

オペレーティングシステム: macos-14
タグ: macossonoma
参照: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.18.1 Ensure On-Device Dictation Is Enabled

このホストをチェック

監査が許可されているマシンで実行してください。スキャンは読み取り専用です。

shell

tmaegis scan --target macos