Details

In the GUI both ‘Install macOS updates’ and ‘Install app updates from the App Store’ are dependent on whether ‘Download new updates when available’ is selected.

Rationale:

It is important that a system has the newest updates downloaded so that they can be applied.

Impact:

If ‘Download new updates when available’ is not selected, updates may not made in a timely manner and the system will be exposed to additional risk.

Solution

Perform the following to enable the system to automatically check for updates:
Graphical Method:

Open System Preferences

Select Software Update

Select Advanced

Select Download new updates when available

Terminal Method:
Run the following command to enable auto update:

$ sudo defaults write /Library/Preferences/com.apple.SoftwareUpdate AutomaticDownload -bool true

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/3423

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Unix.

References

• 800-53|SI-2
• CSCv7|3.4
• CSCv7|3.5

Source

• Tenable.com/audits