NIST MacOS Catalina V1.5.0 CNSSI 1253

Details A deny-all and allow-by-exception firewall policy _MUST_ be employed for managing connections to other systems. Organizations _MUST_ ensure the...

Details The macOS _MUST_ be configured to disable accounts after 35 days of inactivity. This rule prevents malicious users from...

Details Ad tracking and targeted ads _MUST_ be disabled. The information system _MUST_ be configured to provide only essential capabilities....

Details AirDrop _MUST_ be disabled to prevent file transfers to or from unauthorized devices. AirDrop allows users to share and...

Details If the system does not require Apple Filing Protocol (AFP) Sharing, support it is non-essential and _MUST_ be disabled....

Details The prompt for Apple ID setup during Setup Assistant _MUST_ be disabled. macOS will automatically prompt new users to...

Details Bluetooth Sharing _MUST_ be disabled. Bluetooth Sharing allows users to wirelessly transmit files between the macOS and Bluetooth-enabled devices,...

Details The macOS system _MUST_ be configured to disable Bluetooth unless there is an approved device connected. [IMPORTANT] ==== Information...

Details Bonjour multicast advertising _MUST_ be disabled to prevent the system from broadcasting its presence and available services over network...

Details The macOS built-in Calendar.app _MUST_ be disabled as this application can establish a connection to non-approved services. This rule...