Details

Disallowing unsigned software will reduce the risk of unauthorized or malicious applications from running on the system.

Solution

Perform the following to implement the prescribed state:
1. Open System Preferences
2. Select Security & Privacy
3. Select General
4. Select Allow applications downloaded from: Mac App Store and identified developers
Alternatively, perform the following to ensure the system is configured as:
1. Run the following command in Terminal:
sudo spctl –master-enable

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/301

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Unix.

References

• 800-53|CM-7(4)

Source

• Tenable.com/audits