Big Sur – Allow Smartcard Authentication
Details Smartcard authentication _MUST_ be allowed. The use of smartcard credentials facilitates standardization and reduces the risk of unauthorized access....
- Home
- Security Hardening
- NIST MacOS Big Sur V1.4.0 800 53R4 High
NIST MacOS Big Sur V1.4.0 800 53R4 High
Big Sur – Apply Gatekeeper Settings to Block Applications from Unidentified Developers
Details The information system implements cryptographic mechanisms to authenticate software prior to installation. Gatekeeper settings must be configured correctly to...Big Sur – Audit Record Reduction and Report Generation – processing
Details The macOS should be configured to provide and implement the capability to process, sort, and search audit records for...Big Sur – Audit Record Reduction and Report Generation – reduction
Details The system _IS_ configured with the ability provide and implement an audit record reduction and report generation capability. Audit...Big Sur – Automatically Remove or Disable Emergency Accounts within 72 Hours
Details The macOS is able to be configured to automatically remove or disable emergency accounts within 72 hours or less....Big Sur – Automatically Remove or Disable Temporary or Emergency User Accounts within 72 Hours
Details The macOS is able to be configured to set an automated termination for 72 hours or less for all...Big Sur – Automatically Remove or Disable Temporary User Accounts within 72 Hours
Details The macOS is able to be configured to set an automated termination for 72 hours or less for all...Big Sur – Configure Audit Capacity Warning
Details The audit service _MUST_ be configured to notify the system administrator when the amount of free disk space remaining...Big Sur – Configure Audit Failure Notification
Details The audit service _MUST_ be configured to immediately print messages to the console or email administrator users when an...Big Sur – Configure Audit Log Files Group to Wheel
Details Audit log files _MUST_ have the group set to wheel. The audit service _MUST_ be configured to create log...