CIS Apple macOS 12.0 Monterey v4.0.0 L1

Audit Details

Name: CIS Apple macOS 12.0 Monterey v4.0.0 L1

Updated: 10/31/2025

Authority: CIS

Plugin: Unix

Revision: 1.2

Estimated Item Count: 85

File Details

Filename: CIS_Apple_macOS_12.0_Monterey_v4.0.0_L1.audit

Size: 273 kB

MD5: 3ea71ea8dfd7a4f531dac12904cf9528
SHA256: e8a005f8943a50c7ee8e8769f43b733efaa99f80faddfc92a35f726bda33a080

Audit Changelog

 
Revision 1.2

Oct 31, 2025

Functional Update
  • 2.4.7 Ensure Bluetooth Sharing Is Disabled
  • 5.2.1 Ensure Password Account Lockout Threshold Is Configured
Informational Update
  • 1.1 Ensure All Apple-provided Software Is Current
  • 1.5 Ensure System Data Files and Security Updates Are Downloaded Automatically Is Enabled
  • 1.7 Ensure Software Update Deferment Is Less Than or Equal to 30 Days
  • 2.10 Audit Siri Settings
  • 2.12 Audit Touch ID
  • 2.14 Audit Passwords System Preference Setting
  • 2.2.1 Ensure \"Set time and date automatically\" Is Enabled
  • 2.4.11 Ensure AirDrop Is Disabled When Not Actively Transferring Files
  • 2.5.1.2 Ensure all user storage APFS volumes are encrypted
  • 2.5.2.1 Ensure Firewall Is Enabled
  • 2.5.2.2 Ensure Firewall Stealth Mode Is Enabled
  • 2.5.6 Ensure Limit Ad Tracking Is Enabled
  • 2.5.8 Ensure a Custom Message for the Login Screen Is Enabled
  • 2.8.2 Ensure Wake for Network Access Is Disabled
  • 3.1 Ensure Security Auditing Is Enabled
  • 3.5 Ensure Access to Audit Records Is Controlled
  • 3.6 Ensure Firewall Logging Is Enabled and Configured
  • 5.1.1 Ensure Home Folders Are Secure
  • 5.1.2 Ensure System Integrity Protection Status (SIP) Is Enabled
  • 5.1.5 Ensure Appropriate Permissions Are Enabled for System Wide Applications
  • 5.1.6 Ensure No World Writable Files Exist in the System Folder
  • 5.10 Ensure Secure Keyboard Entry Terminal.app Is Enabled
  • 5.2.1 Ensure Password Account Lockout Threshold Is Configured
  • 5.2.2 Ensure Password Minimum Length Is Configured
  • 5.2.7 Ensure Password Age Is Configured
  • 5.2.8 Ensure Password History Is Configured
  • 5.3 Ensure the Sudo Timeout Period Is Set to Zero
  • 5.4 Ensure a Separate Timestamp Is Enabled for Each User/tty Combo
  • 5.9 Ensure Users' Accounts Do Not Have a Password Hint
  • 6.2 Ensure Show All Filename Extensions Setting is Enabled
  • 7.2.10 Audit Pop-up Windows
  • 7.2.3 Audit Passwords System Preference Setting
  • 7.2.7 Ensure Advertising Privacy Protection in Safari Is Enabled
Miscellaneous
  • Metadata updated.
  • Variables updated.
Revision 1.1

Jun 16, 2025

Functional Update
  • 2.4.7 Ensure Bluetooth Sharing Is Disabled