Monterey – Configure the System to Prevent the Unauthorized Disclosure of Data via Shared Resources Details The information system _IS_ configured to ensure that the unauthorized disclosure of data does not occur when resources are...
Monterey – Configure the System to Protect Memory from Unauthorized Code Execution Details The information system _IS_ configured to implement non-executable data to protect memory from code execution. Some adversaries launch attacks...
Monterey – Configure the System to Separate User and System Functionality – separate Details The information system _IS_ configured to separate user and system functionality. Operating system management functionality includes functions necessary for...
Monterey – Configure the System to Uniquely Identify and Authenticate Non-Organizational Users Details The information system uniquely identifies and authenticates non-organizational users (or processes acting on behalf of non-organizational users). NOTE: Nessus...
Monterey – Configure User Session Lock When a Smart Token is Removed Details The screen lock _MUST_ be configured to initiate automatically when the smart token is removed from the system. Session...
Monterey – Disable AirDrop Details AirDrop _MUST_ be disabled to prevent file transfers to or from unauthorized devices. AirDrop allows users to share and...
Monterey – Disable Airplay Receiver Details Airplay Receiver allows you to send content from another Apple device to be displayed on the screen as it’s...
Monterey – Control Connections to Other Systems via a Deny-All and Allow-by-Exception Firewall Policy Details A deny-all and allow-by-exception firewall policy _MUST_ be employed for managing connections to other systems. Organizations _MUST_ ensure the...
Monterey – Disable Accounts after 35 Days of Inactivity Details The macOS _MUST_ be configured to disable accounts after 35 days of inactivity. This rule prevents malicious users from...