NIST Archives

Developing Your Mac Compliance Strategy Generating Baselines and Guidance

May 19, 2023macOS Security Compliance Project (mSCP), TrainingCenter for Internet Security, education, Federal Compliance, link, NIST, Security, STIG, training

The Apple Deployment and Management exam doesn’t test you on the learning objectives covered in this tutorial. Link: https://it-training.apple.com/tutorials/deployment/sec020

Jamf Compliance Editor

November 2, 2022macOS Security Compliance Project (mSCP)app, Jamf Pro, mSCP, NIST

Jamf Compliance Editor is a tool that provides macOS system administrators with an easy way to establish and manage compliance baselines on their fleet of macOS devices. This tool is…

Establishing Compliance Baselines

October 13, 2022Softwareautomation, Jamf Extension Attribute, Jamf Pro, MDM, mSCP, NIST, STIG

This is fantastic, a GUI tool to help manage security (macOS Security Compliance Project) baselines... thank you, thank you, thank you Link: https://trusted.jamf.com/docs/establishing-compliance-baselines https://support.apple.com/guide/sccc/macos-security-compliance-project-sccc22685bb2/web

mSCP jamf scripts

August 29, 2022Apple, macOS Security Compliance Project (mSCP)automation, Jamf Pro, MDM, NIST, Security, STIG

Bob Gendler one of the macOS Security Compliance Project (mSCP) Authors has posted some (FANTASTIC) scripts that will help integrate your mSCP project into a jamf instance. This will help…

Enforce Multifactor Authentication for Login

June 24, 2022Apple, macOSFederal Compliance, Gotcha!, Jamf Extension Attribute, NIST, pam.d, Security, Smart Cards, Smartcard, STIG

6.1. Enforce Multifactor Authentication for Login The system MUST be configured to enforce multifactor authentication. All users MUST go through multifactor authentication to prevent unauthenticated access and potential compromise to…

Common Platform Enumeration (CPE)

May 15, 2022SecurityAudit, Configuration Management, CPE, NIST, Security

Common Platform Enumeration (CPE) is a structured naming scheme for information technology (IT) systems, software, and packages. Based upon the generic syntax for Uniform Resource Identifiers (URI), CPE includes a…

Requesting NIST NVD API key:

May 13, 2022LinksCVE, NIST, Security

NVD API: keys, documentation, and request limits! To better serve its growing user base, the NVD is announcing the availability of API keys. Users who request and activate a key…

The macOS Security Compliance Project : macOS Security Compliance tool(s)

December 31, 2021Apple, macOS Security Compliance Project (mSCP)NIST, Security

The macOS Security Compliance Project (mSCP) provides a programmatic approach to generating security guidance. The project uses a set of tested and validated controls that map(s) these controls against any security guide supported by the project.