The macOS system must disable Find My service.
An XCCDF Rule
Description
The Find My service must be disabled. A Mobile Device Management (MDM) solution must be used to carry out remote locking and wiping instead of Apple's Find My service. Apple's Find My service uses a personal AppleID for authentication. Organizations should rely on MDM solutions, which have much more secure authentication requirements, to perform remote lock and remote wipe.
- ID
- SV-259526r958478_rule
- Version
- APPL-14-002180
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the macOS system to disable Find My service by installing the "com.apple.applicationaccess" configuration profile.