Skip to content
ATO Pathways
  Log In

Apple macOS 14 (Sonoma) Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The macOS system must issue or obtain public key certificates from an approved service provider.

    <VulnDiscussion>The organization must issue or obtain public key certificates from an organization-approved service provider and ensure only ...
    Rule Medium Severity
    Show

  • SRG-OS-000071-GPOS-00039

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must disable sending Siri and Dictation information to Apple.

    &lt;VulnDiscussion&gt;The ability for Apple to store and review audio of Siri and Dictation interactions must be disabled. The information system ...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must enforce on device dictation.

    &lt;VulnDiscussion&gt;Dictation must be restricted to on device only to prevent potential data exfiltration. The information system must be config...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must disable dictation.

    &lt;VulnDiscussion&gt;Dictation must be disabled on Intel-based Macs as the feature On Device Dictation is only available on Apple Silicon devices....
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must disable Printer Sharing.

    &lt;VulnDiscussion&gt;Printer Sharing must be disabled.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;&l...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must disable Remote Management.

    &lt;VulnDiscussion&gt;Remote Management must be disabled.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must disable the Bluetooth system settings pane.

    &lt;VulnDiscussion&gt;The Bluetooth System Setting pane must be disabled to prevent access to the Bluetooth configuration.&lt;/VulnDiscussion&gt;&l...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must disable the iCloud Freeform services.

    &lt;VulnDiscussion&gt;The macOS built-in Freeform.app connection to Apple's iCloud service must be disabled. Apple's iCloud service does not provi...
    Rule Medium Severity
    Show

  • SRG-OS-000403-GPOS-00182

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must require passwords contain a minimum of one numeric character.

    &lt;VulnDiscussion&gt;The macOS must be configured to require at least one numeric character be used when a password is created. This rule enforce...
    Rule Medium Severity
    Show

  • SRG-OS-000076-GPOS-00044

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must restrict maximum password lifetime to 60 days.

    &lt;VulnDiscussion&gt;The macOS must be configured to enforce a maximum password lifetime limit of at least 60 days. This rule ensures that users ...
    Rule Medium Severity
    Show

  • SRG-OS-000078-GPOS-00046

    <GroupDescription></GroupDescription>
    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules