Monterey – Allow Smartcard Authentication
Details Smartcard authentication _MUST_ be allowed. The use of smartcard credentials facilitates standardization and reduces the risk of unauthorized access....
- Home
- Security Hardening
- NIST MacOS Monterey V1.0.0 800 53R4 High
NIST MacOS Monterey V1.0.0 800 53R4 High
Monterey – Apply Gatekeeper Settings to Block Applications from Unidentified Developers
Details The information system implements cryptographic mechanisms to authenticate software prior to installation. Gatekeeper settings must be configured correctly to...Monterey – Audit Record Reduction and Report Generation – processing
Details The macOS should be configured to provide and implement the capability to process, sort, and search audit records for...Monterey – Audit Record Reduction and Report Generation – reduction
Details The system _IS_ configured with the ability provide and implement an audit record reduction and report generation capability. Audit...Monterey – Automatically Remove or Disable Emergency Accounts within 72 Hours
Details The macOS is able to be configured to automatically remove or disable emergency accounts within 72 hours or less....Monterey – Automatically Remove or Disable Temporary or Emergency User Accounts within 72 Hours
Details The macOS is able to be configured to set an automated termination for 72 hours or less for all...Monterey – Automatically Remove or Disable Temporary User Accounts within 72 Hours
Details The macOS is able to be configured to set an automated termination for 72 hours or less for all...Monterey – Configure Audit Capacity Warning
Details The audit service _MUST_ be configured to notify the system administrator when the amount of free disk space remaining...Monterey – Configure Audit Failure Notification
Details The audit service _MUST_ be configured to immediately print messages to the console or email administrator users when an...Monterey – Configure Audit Log Files Group to Wheel
Details Audit log files _MUST_ have the group set to wheel. The audit service _MUST_ be configured to create log...