Retain system.log for 90 or more days
Details OSX writes information pertaining to system-related events to the file /var/log/system.log and has a configurable retention policy for this...
- Home
- Security Hardening
- CIS Apple OSX 10 .9 L1 V1.3.0
CIS Apple OSX 10 .9 L1 V1.3.0
Review Application Firewall Rules
Details A firewall is a piece of software that blocks unwanted incoming connections to a system. Apple has posted general...Set an inactivity interval of 20 minutes or less for the screen saver
Details A locking screensaver is one of the standard security controls to limit access to a computer and the current...Set a screen corner to Start Screen Saver
Details The intent of this control is to resemble control-alt-delete on Windows Systems as a means of quickly locking the...Show Bluetooth status in menu bar
Details By showing the Bluetooth status in the menu bar, a small Bluetooth icon is placed in the menu bar....Time Machine Volumes Are Encrypted
Details One of the most important security tools for data protection on MacOS is FileVault. With encryption in place it...Turn off Bluetooth, if no paired devices exist
Details Bluetooth devices use a wireless communications system that replaces the cables used by other peripherals to connect to a...Turn off Bluetooth “Discoverable” mode when not pairing devices
Details When Bluetooth is set to discoverable mode, the Mac sends a signal indicating that it’s available to pair with...Verify all Apple provided software is current
Details Software vendors release security patches and software updates for their products when security vulnerabilities are discovered. There is no...Verify Display Sleep is set to a value larger than the Screen Saver
Details If the Screen Saver is used to lock the screen, verify the Display Sleep settings are longer than the...