The macOS system must restrict the ability of individuals to use USB storage devices.
An XCCDF Rule
Description
External writeable media devices must be disabled for users. External USB devices are a potential vector for malware and can be used to exfiltrate sensitive data if an approved data-loss prevention (DLP) solution is not installed.
- ID
- SV-257243r905362_rule
- Version
- APPL-13-005051
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the macOS system to disable USB storage devices by installing the "Restrictions Policy" configuration profile.