Catalina – Access Control for Mobile Devices
Details A mobile device is a computing device that has a small form factor such that it can easily be...
- Home
- Security Hardening
- NIST MacOS Catalina V1.5.0 800-53R5 Moderate
NIST MacOS Catalina V1.5.0 800-53R5 Moderate
Catalina – Allow Smartcard Authentication
Details Smartcard authentication _MUST_ be allowed. The use of smartcard credentials facilitates standardization and reduces the risk of unauthorized access....Catalina – Apply Gatekeeper Settings to Block Applications from Unidentified Developers
Details The information system implements cryptographic mechanisms to authenticate software prior to installation. Gatekeeper settings must be configured correctly to...Catalina – Audit Record Reduction and Report Generation – processing
Details The macOS should be configured to provide and implement the capability to process, sort, and search audit records for...Catalina – Audit Record Reduction and Report Generation – reduction
Details The system _IS_ configured with the ability provide and implement an audit record reduction and report generation capability. Audit...Catalina – Automatically Remove or Disable Emergency Accounts within 72 Hours
Details The macOS is able to be configured to automatically remove or disable emergency accounts within 72 hours or less....Catalina – Automatically Remove or Disable Temporary or Emergency User Accounts within 72 Hours
Details The macOS is able to be configured to set an automated termination for 72 hours or less for all...Catalina – Automatically Remove or Disable Temporary User Accounts within 72 Hours
Details The macOS is able to be configured to set an automated termination for 72 hours or less for all...Catalina – Configure Apple System Log Files Owned by Root and Group to Wheel
Details The Apple System Logs (ASL) _MUST_ be owned by root. ASL logs contain sensitive data about the system and...Catalina – Configure Apple System Log Files To Mode 640 or Less Permissive
Details The Apple System Logs (ASL) _MUST_ be configured to be writable by root and readable only by the root...