> Disabling Siri completely also does the trick, but that's very heavy handed.
It is. Plus it disables a fairly useful feature. I find Siri to be pretty useful.
I think disabling "Hey Siri" would be fine, but disabling Siri by using the home button/earbud button is also a bit heavy-handed and eliminates good functionality, while not enhancing security that much. Given that you can specify what Siri has access
to, if memory serves, the risk is that someone who gets the phone improperly would be able to make phone calls, send text messages, or ask certain other questions that would not reveal confidential information.
Button-activated Siri access from the home screen allows a person to get directions while driving. This is a significant safety enhancement that could eliminate accidents of federal employees while driving. I commute by bike, when I hear a text message
alert, I ask Siri to read me a message. While that is a theoretical security risk, we should ask ourselves if it's an ACTUAL threat. Having that functionality allows me to respond while commuting without pulling over and unlocking the device.
Additionally, for disabled users, Siri voice access can be essential. Care should be made to ensure that any adopted policy does not violate the Americans with Disabilities Act and any federal implementing regulations. We need to ensure that differently-abled
employees can do their jobs.
Anyhow, I know some on this list have a zero-tollerance perspective when it comes to anything that might be theoretically a security risk. But I suggest an actual balancing of the risk of harm with the benefit of the technology would create better policies.
Joe