STIG Archives

Developing Your Mac Compliance Strategy Generating Baselines and Guidance

May 19, 2023macOS Security Compliance Project (mSCP), TrainingCenter for Internet Security, education, Federal Compliance, link, NIST, Security, STIG, training

The Apple Deployment and Management exam doesn’t test you on the learning objectives covered in this tutorial. Link: https://it-training.apple.com/tutorials/deployment/sec020

Establishing Compliance Baselines

October 13, 2022Softwareautomation, Jamf Extension Attribute, Jamf Pro, MDM, mSCP, NIST, STIG

This is fantastic, a GUI tool to help manage security (macOS Security Compliance Project) baselines... thank you, thank you, thank you Link: https://trusted.jamf.com/docs/establishing-compliance-baselines https://support.apple.com/guide/sccc/macos-security-compliance-project-sccc22685bb2/web

mSCP jamf scripts

August 29, 2022Apple, macOS Security Compliance Project (mSCP)automation, Jamf Pro, MDM, NIST, Security, STIG

Bob Gendler one of the macOS Security Compliance Project (mSCP) Authors has posted some (FANTASTIC) scripts that will help integrate your mSCP project into a jamf instance. This will help…

STIG macOS Firefox Enterprise

August 19, 2022SoftwareConfiguration profile, Firefox, Jamf Pro, mobileconfig, STIG

Following guidance from this Jamf Nation post and this JSON Schema I was able to put together this configuration file. MOZILLA FIREFOX STIG - REVISION HISTORY Version 6, Release 3…

Time Synchronization

July 13, 2022Code10.15 - macOS Catalina, STIG, timestamp

To check the state of the system, run the following command(s): /bin/launchctl list | /usr/bin/grep -c com.apple.timed If the result is not 1, this is a finding. Remediation Description Perform…

Enforce Multifactor Authentication for Login

June 24, 2022Apple, macOSFederal Compliance, Gotcha!, Jamf Extension Attribute, NIST, pam.d, Security, Smart Cards, Smartcard, STIG

6.1. Enforce Multifactor Authentication for Login The system MUST be configured to enforce multifactor authentication. All users MUST go through multifactor authentication to prevent unauthenticated access and potential compromise to…

NIST SP 800-219 macOS Security Compliance Project (mSCP) Guidance

February 22, 2022Apple, macOS Security Compliance Project (mSCP)automation, macOS 12, Security, STIG

Apple; baseline; configuration management; endpoint device security; macOS; macOS Security Compliance Project (mSCP); operating system security; security compliance. https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-219-draft.pdf This publication is available free of charge from: https://doi.org/10.6028/NIST.SP.800-219-draft Jamf Pro…

Apple macOS 12 Security Technical Implementation Guide (STIG)

February 5, 2022Apple, macOSmacOS 12, Security, STIG

The Apple macOS 12 Security Technical Implementation Guide (STIG) provides security policy and configuration requirements for the use of Apple macOS 12 in the Department of Defense (DoD). Guidance in…