Big Sur – Access Control for Mobile Devices
Details A mobile device is a computing device that has a small form factor such that it can easily be...
- Home
- Security Hardening
- NIST MacOS Big Sur V1.4.0 800 53R5 Moderate
NIST MacOS Big Sur V1.4.0 800 53R5 Moderate
Big Sur – Allow Smartcard Authentication
Details Smartcard authentication _MUST_ be allowed. The use of smartcard credentials facilitates standardization and reduces the risk of unauthorized access....Big Sur – Apply Gatekeeper Settings to Block Applications from Unidentified Developers
Details The information system implements cryptographic mechanisms to authenticate software prior to installation. Gatekeeper settings must be configured correctly to...Big Sur – Audit Record Reduction and Report Generation – processing
Details The macOS should be configured to provide and implement the capability to process, sort, and search audit records for...Big Sur – Audit Record Reduction and Report Generation – reduction
Details The system _IS_ configured with the ability provide and implement an audit record reduction and report generation capability. Audit...Big Sur – Automatically Remove or Disable Emergency Accounts within 72 Hours
Details The macOS is able to be configured to automatically remove or disable emergency accounts within 72 hours or less....Big Sur – Automatically Remove or Disable Temporary or Emergency User Accounts within 72 Hours
Details The macOS is able to be configured to set an automated termination for 72 hours or less for all...Big Sur – Automatically Remove or Disable Temporary User Accounts within 72 Hours
Details The macOS is able to be configured to set an automated termination for 72 hours or less for all...Big Sur – Configure Apple System Log Files Owned by Root and Group to Wheel
Details The Apple System Logs (ASL) _MUST_ be owned by root. ASL logs contain sensitive data about the system and...Big Sur – Configure Apple System Log Files To Mode 640 or Less Permissive
Details The Apple System Logs (ASL) _MUST_ be configured to be writable by root and readable only by the root...