Catalina – Configure the System to Implement Approved Cryptography to Protect Information
Details The information system _IS_ configured to implement approved cryptography to protect information. Use of weak or untested encryption algorithms...
- Home
- Security Hardening
- NIST MacOS Catalina V1.5.0 800-53R5 High
NIST MacOS Catalina V1.5.0 800-53R5 High
Catalina – Configure the System to Prevent the Unauthorized Disclosure of Data via Shared Resources
Details The information system _IS_ configured to ensure that the unauthorized disclosure of data does not occur when resources are...Catalina – Configure the System to Protect Memory from Unauthorized Code Execution
Details The information system _IS_ configured to implement non-executable data to protect memory from code execution. Some adversaries launch attacks...Catalina – Configure the System to Separate User and System Functionality – isolate
Details The information system _IS_ configured to isolate security functions from non-security functions. link:https://support.apple.com/guide/security/welcome/web[] Solution The technology inherently meets this...Catalina – Configure the System to Separate User and System Functionality – separate
Details The information system _IS_ configured to separate user and system functionality. Operating system management functionality includes functions necessary for...Catalina – Control Connections to Other Systems via a Deny-All and Allow-by-Exception Firewall Policy
Details A deny-all and allow-by-exception firewall policy _MUST_ be employed for managing connections to other systems. Organizations _MUST_ ensure the...Catalina – Configure the System to Uniquely Identify and Authenticate Non-Organizational Users
Details The information system uniquely identifies and authenticates non-organizational users (or processes acting on behalf of non-organizational users). NOTE: Nessus...Catalina – Configure User Session Lock When a Smart Token is Removed
Details The screen lock _MUST_ be configured to initiate automatically when the smart token is removed from the system. Session...Catalina – Disable Accounts after 35 Days of Inactivity
Details The macOS _MUST_ be configured to disable accounts after 35 days of inactivity. This rule prevents malicious users from...Catalina – Disable Ad Tracking
Details Ad tracking and targeted ads _MUST_ be disabled. The information system _MUST_ be configured to provide only essential capabilities....