3 ms·
Coincidentally, NIST published the SP 800-219, Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP)[1], a few days ago. NIS
by northwood130nm 4y ago
Coincidentally, NIST published the SP 800-219, Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP)[1], a few days ago.
NIST hosts all you need to verify as well as enforce several compliance requirements in their official GitHub repo [2]. The following baselines are supported for macOS Monterey:
- NIST SP 800-53r5 Low, Moderate, and High
- DISA-STIG
- NIST 800-171
- CNSSI-1253
- CIS macOS Benchmarks Level 1 and 2
- CIS Critical Security Controls Version 8
If you've been following the project closely you'll notice that rules that were originally written as shell scripts are going away in favor of config profiles.
[1] https://csrc.nist.gov/publications/detail/sp/800-219/final https://csrc.nist.gov/publications/detail/sp/800-219/final
[2] https://github.com/usnistgov/macos_security https://github.com/usnistgov/macos_security