Apple macOS 12 (Monterey) Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
The macOS system must initiate a session lock after a 15-minute period of inactivity.
A screen saver must be enabled and set to require a password to unlock. The timeout should be set to 15 minutes of inactivity. This mitigates the risk that a user might forget to manually lock the ...Rule Medium Severity -
The macOS system must conceal, via the session lock, information previously visible on the display with a publicly viewable image.
A default screen saver must be configured for all users, as the screen saver will act as a session time-out lock for the system and must conceal the contents of the screen from unauthorized users. ...Rule Low Severity -
The macOS system must automatically remove or disable temporary and emergency user accounts after 72 hours.
If temporary user accounts remain active when no longer needed or for an excessive period, these accounts may be targeted by attackers to gain unauthorized access. To mitigate this risk, automated ...Rule Medium Severity -
The macOS system must utilize an ESS solution and implement all DoD required modules.
The macOS system must employ automated mechanisms to determine the state of system components. The DoD requires the installation and use of an approved HBSS solution to be implemented on the operat...Rule Medium Severity -
The macOS system must display the Standard Mandatory DoD Notice and Consent Banner before granting remote access to the operating system.
Display of a standardized and approved use notification before granting access to the operating system ensures privacy and security notification verbiage used is consistent with applicable federal ...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.