Catalina – Disable FileVault Automatic Login
Details If FileVault is enabled, automatic login _MUST_ be disabled, so that both FileVault and login window authentication are required....
- Home
- Security Hardening
- NIST MacOS Catalina V1.5.0 800 171
NIST MacOS Catalina V1.5.0 800 171
Catalina – Disable Find My Service
Details The Find My service _MUST_ be disabled. A Mobile Device Management (MDM) solution _MUST_ be used to carry out...Catalina – Disable Guest Access to Shared Apple File Protocol Folders
Details Guest access to shared Apple File Protocol (AFP) folders _MUST_ be disabled. Turning off guest access prevents anonymous users...Catalina – Disable Guest Access to Shared SMB Folders
Details Guest access to shared Server Message Block (SMB) folders _MUST_ be disabled. Turning off guest access prevents anonymous users...Catalina – Disable Handoff
Details Handoff _MUST_ be disabled. Handoff allows you to continue working on a document or project when the user switches...Catalina – Disable Hot Corners
Details Hot corners _MUST_ be disabled. The information system conceals, via the session lock, information previously visible on the display...Catalina – Disable iCloud Address Book
Details The macOS built-in Contacts.app connection to Apple’s iCloud service _MUST_ be disabled. Apple’s iCloud service does not provide an...Catalina – Disable iCloud Bookmarks
Details The macOS built-in Safari.app bookmark synchronization via the iCloud service _MUST_ be disabled. Apple’s iCloud service does not provide...Catalina – Disable iCloud Desktop and Document Folder Sync
Details The macOS system’s ability to automatically synchronize a user’s desktop and documents folder to their iCloud Drive _MUST_ be...Catalina – Disable iCloud Document Sync
Details The macOS built-in iCloud document synchronization service _MUST_ be disabled to prevent organizational data from being synchronized to personal...