Big Sur – Configure System to Audit All Log In and Log Out Events
Details The audit system _MUST_ be configured to record all attempts to log in and out of the system (lo)....
- Home
- Security Hardening
- NIST MacOS Big Sur V1.4.0 800 171
NIST MacOS Big Sur V1.4.0 800 171
Big Sur – Configure System to Shut Down Upon Audit Failure
Details The audit service _MUST_ be configured to shut down the computer if it is unable to audit system events....Big Sur – Configure the System for Nonlocal Maintenance
Details Nonlocal maintenance and diagnostic activities are those activities conducted by individuals communicating through a network, either an external network...Big Sur – Configure the System to Block Non-Privileged Users from Executing Privileged Functions
Details The information system _IS_ configured to block standard users from executing privileged functions. Privileged functions include disabling, circumventing, or...Big Sur – Configure the System to Implement Approved Cryptography to Protect Information
Details The information system _IS_ configured to implement approved cryptography to protect information. Use of weak or untested encryption algorithms...Big Sur – Configure the System to Prevent the Unauthorized Disclosure of Data via Shared Resources
Details The information system _IS_ configured to ensure that the unauthorized disclosure of data does not occur when resources are...Big Sur – Configure the System to Separate User and System Functionality – separate
Details The information system _IS_ configured to separate user and system functionality. Operating system management functionality includes functions necessary for...Big Sur – Configure User Session Lock When a Smart Token is Removed
Details The screen lock _MUST_ be configured to initiate automatically when the smart token is removed from the system. Session...Big Sur – Control Connections to Other Systems via a Deny-All and Allow-by-Exception Firewall Policy
Details A deny-all and allow-by-exception firewall policy _MUST_ be employed for managing connections to other systems. Organizations _MUST_ ensure the...Big Sur – Disable Apple ID Setup during Setup Assistant
Details The prompt for Apple ID setup during Setup Assistant _MUST_ be disabled. macOS will automatically prompt new users to...