Details

Software vendors release security patches and software updates for their products when security vulnerabilities are discovered. There is no simple way to complete this action without a network connection to an Apple software repository. Please ensure appropriate access for this control. This check is only for what Apple provides through software update.

Rationale:

It is important that these updates be applied in a timely manner to prevent unauthorized persons from exploiting the identified vulnerabilities.

Impact:

Missing patches can lead to more exploit opportunities.

Solution

Perform the following to ensure the system is configured as prescribed:

Choose Apple menu > App Store – If prompted, enter an admin name and password.

Install all available updates and software patches that are applicable.

Alternatively:

In Terminal, run the following:

softwareupdate -l

In Terminal, run the following for any packages that show up in step 1:

sudo softwareupdate -i

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/3092

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Unix.

References

• 800-53|SI-2c.

Source

• Tenable.com/audits