Skip to content

Apple macOS 12 (Monterey) Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000028-GPOS-00009

    Group
  • SRG-OS-000029-GPOS-00010

    Group
  • SRG-OS-000030-GPOS-00011

    Group
  • The macOS system must be configured to lock the user session when a smart token is removed.

    A session lock is a temporary action taken when a user stops work and moves away from the immediate physical vicinity of the information system but does not want to log out because of the temporary...
    Rule Medium Severity
  • SRG-OS-000031-GPOS-00012

    Group
  • SRG-OS-000031-GPOS-00012

    Group
  • The macOS system must be configured to disable hot corners.

    Although hot corners can be used to initiate a session lock or launch useful applications, they can also be configured to disable an automatic session lock from initiating. Such a configuration int...
    Rule Medium Severity
  • SRG-OS-000002-GPOS-00002

    Group
  • SRG-OS-000355-GPOS-00143

    Group
  • The macOS system must, for networked systems, compare internal information system clocks at least every 24 hours with a server that is synchronized to one of the redundant United States Naval Observatory (USNO) time servers or a time server designated for the appropriate DoD network (NIPRNet/SIPRNet) and/or the Global Positioning System (GPS).

    Inaccurate time stamps make it more difficult to correlate events and can lead to an inaccurate analysis. Determining the correct time a particular event occurred on a system is critical when condu...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules