Details
Users of the system can easily assume that the computer is protected when the display goes to sleep.
The computer should be configured so that the screen is locked whenever the display turns off automatically.
NOTE : CIS recommends this value be ‘longer than the Screen Saver’. An assumed value of ’10’ is used here.
Solution
In System Preferences: Energy Saver, drag the slider for ‘Put the display(s) to sleep…’ to a reasonable number,
but longer than the screen saver setting. The Mac will display a warning if the number is too short.
Alternatively, use the following command:
sudo /usr/bin/pmset -c displaysleep 0
Note: The -c flag means ‘wall power.’ Different settings must be used for other power sources
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Unix.