Ensure all user storage CoreStorage volumes are encrypted
Details Apple introduced CoreStorage with 10.7. It is used as the default for formatting on macOS volumes prior to 10.13....
- Home
- Security Hardening
- CIS Apple MacOS 10.15 V1.4.0 L1
CIS Apple MacOS 10.15 V1.4.0 L1
Ensure all user storage APFS volumes are encrypted
Details Apple developed a new file system that was first made available in 10.12 and then became the default in...Ensure EFI version is valid and being regularly checked – daemon
Details In order to mitigate firmware attacks Apple has created an automated Firmware check to ensure that the EFI version...Ensure EFI version is valid and being regularly checked – integrity-check
Details In order to mitigate firmware attacks Apple has created an automated Firmware check to ensure that the EFI version...Ensure Firewall is configured to log
Details The socketfilter firewall is what is used when the firewall is turned on in the Security Preference Pane. In...Ensure http server is not running
Details macOS used to have a graphical front-end to the embedded Apache web server in the Operating System. Personal web...Ensure nfs server is not running.
Details macOS can act as an NFS fileserver. NFS sharing could be enabled to allow someone on another computer to...Ensure security auditing retention
Details The macOS audit capability contains important information to investigate security or operational issues. This resource is only completely useful...Ensure time set is within appropriate limits
Details Correct date and time settings are required for authentication protocols, file creation, modification dates and log entries. Ensure that...Familiarize users with screen lock tools or corner to Start Screen Saver
Details In 10.13 Apple added a ‘Lock Screen’ option to the Apple Menu. Prior to this the best quick lock...