Skip to content
ATO Pathways
  Log In

Apple macOS 15 (Sequoia) Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must disable Remote Management.

    &lt;VulnDiscussion&gt;Remote Management must be disabled.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/FalsePositives&gt;&lt;FalseNegatives&gt;...
    Rule Medium Severity
    Show

  • SRG-OS-000095-GPOS-00049

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must disable the iCloud Freeform services.

    &lt;VulnDiscussion&gt;The macOS built-in Freeform.app connection to Apple's iCloud service must be disabled. Enabling any service increases the at...
    Rule Medium Severity
    Show

  • SRG-OS-000403-GPOS-00182

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must issue or obtain public key certificates from an approved service provider.

    &lt;VulnDiscussion&gt;The organization must issue or obtain public key certificates from an organization-approved service provider and ensure only ...
    Rule Medium Severity
    Show

  • SRG-OS-000071-GPOS-00039

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must require that passwords contain a minimum of one numeric character.

    &lt;VulnDiscussion&gt;The macOS must be configured to require at least one numeric character be used when a password is created. This rule enforce...
    Rule Medium Severity
    Show

  • SRG-OS-000076-GPOS-00044

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must restrict maximum password lifetime to 60 days.

    &lt;VulnDiscussion&gt;The macOS must be configured to enforce a maximum password lifetime limit of at least 60 days. This rule ensures that users ...
    Rule Medium Severity
    Show

  • SRG-OS-000078-GPOS-00046

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must require a minimum password length of 14 characters.

    &lt;VulnDiscussion&gt;The macOS must be configured to require that a minimum of 14 characters be used when a password is created. This rule enforc...
    Rule Medium Severity
    Show

  • SRG-OS-000266-GPOS-00101

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must require that passwords contain a minimum of one special character.

    &lt;VulnDiscussion&gt;The macOS must be configured to require that at least one special character be used when a password is created. Special char...
    Rule Medium Severity
    Show

  • SRG-OS-000079-GPOS-00047

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must enable firmware password.

    &lt;VulnDiscussion&gt;A firmware password must be enabled and set. Single user mode, recovery mode, the Startup Manager, and several other tools a...
    Rule Medium Severity
    Show

  • SRG-OS-000079-GPOS-00047

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must remove password hints from user accounts.

    &lt;VulnDiscussion&gt;User accounts must not contain password hints. Password hints leak information about passwords in use and can lead to loss o...
    Rule Medium Severity
    Show

  • SRG-OS-000067-GPOS-00035

    <GroupDescription></GroupDescription>
    Group
    Show

  • The macOS system must enforce smart card authentication.

    &lt;VulnDiscussion&gt;Smart card authentication must be enforced. The use of smart card credentials facilitates standardization and reduces the ri...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules