Big Sur – Disable Accounts after 35 Days of Inactivity
Details The macOS _MUST_ be configured to disable accounts after 35 days of inactivity. This rule prevents malicious users from...
- Home
- Security Hardening
- NIST MacOS Big Sur V1.4.0 800 171
NIST MacOS Big Sur V1.4.0 800 171
Big Sur – Disable AirDrop
Details AirDrop _MUST_ be disabled to prevent file transfers to or from unauthorized devices. AirDrop allows users to share and...Big Sur – Disable Bluetooth Sharing
Details Bluetooth Sharing _MUST_ be disabled. Bluetooth Sharing allows users to wirelessly transmit files between the macOS and Bluetooth-enabled devices,...Big Sur – Disable Bluetooth When no Approved Device is Connected
Details The macOS system _MUST_ be configured to disable Bluetooth unless there is an approved device connected. [IMPORTANT] ==== Information...Big Sur – Disable Bonjour Multicast
Details Bonjour multicast advertising _MUST_ be disabled to prevent the system from broadcasting its presence and available services over network...Big Sur – Disable Calendar.app
Details The macOS built-in Calendar.app _MUST_ be disabled as this application can establish a connection to non-approved services. This rule...Big Sur – Disable Content Caching Service
Details Content caching _MUST_ be disabled. Content caching is a macOS service that helps reduce Internet data usage and speed...Big Sur – Disable FaceTime.app
Details The macOS built-in FaceTime.app _MUST_ be disabled. The FaceTime.app establishes a connection to Apple’s iCloud service, even when security...Big Sur – Disable FileVault Automatic Login
Details If FileVault is enabled, automatic login _MUST_ be disabled, so that both FileVault and login window authentication are required....Big Sur – Disable Find My Service
Details The Find My service _MUST_ be disabled. A Mobile Device Management (MDM) solution _MUST_ be used to carry out...