CIS Apple macOS 14.0 Sonoma Cloud-tailored v1.1.0 L1

Audit Details

Name: CIS Apple macOS 14.0 Sonoma Cloud-tailored v1.1.0 L1

Updated: 3/5/2026

Authority: CIS

Plugin: Unix

Revision: 1.2

Estimated Item Count: 46

File Details

Filename: CIS_Apple_macOS_14.0_Sonoma_Cloud-tailored_v1.1.0_L1.audit

Size: 124 kB

MD5: 2a2bd4ae7ac56937d6216fb8d7448759
SHA256: 4754e18ec9ac3d4f191be5df2b898355bc4facde38692feda82d147b5dd7299e

Audit Changelog

 
Revision 1.2

Mar 5, 2026

Functional Update
  • 1.2 Ensure Auto Update Is Enabled
  • 1.3 Ensure Download New Updates When Available Is Enabled
  • 1.4 Ensure Install of macOS Updates Is Enabled
  • 1.5 Ensure Install Application Updates from the App Store Is Enabled
  • 1.6 Ensure Install Security Responses and System Files Is Enabled
  • 2.4.4 Ensure Login Window Displays as Name and Password Is Enabled
  • 2.6.1 Ensure Guest Account Is Disabled
Miscellaneous
  • Metadata updated.
  • Platform check updated.
Added
  • CIS_Apple_macOS_14.0_Sonoma_Cloud-tailored_v1.1.0_L1.audit from CIS Apple macOS 14.0 Sonoma Cloud-tailored 1.1.0
Removed
  • CIS_Apple_macOS_14.0_Sonoma_Cloud-tailored_v1.1.0_L1.audit from CIS Apple macOS 14.0 Sonoma Cloud-tailored Benchmark v1.1.0
Revision 1.1

Oct 31, 2025

Functional Update
  • 5.1.1 Ensure Home Folders Are Secure
  • 5.1.4 Ensure Appropriate Permissions Are Enabled for System Wide Applications
  • 5.1.5 Ensure No World Writable Folders Exist in the System Folder
  • 5.2.1 Ensure Password Account Lockout Threshold Is Configured
Informational Update
  • 1.1 Ensure All Apple-provided Software Is Current
  • 2.1.1 Ensure Firewall Is Enabled
  • 2.2.1.1 Ensure Set Time and Date Automatically Is Enabled
  • 2.3.2 Ensure Limit Ad Tracking Is Enabled
  • 2.4.1 Ensure an Inactivity Interval of 20 Minutes Or Less for the Screen Saver Is Enabled
  • 2.5.1 Ensure Users' Accounts Do Not Have a Password Hint
  • 3.1 Ensure Security Auditing Is Enabled
  • 3.5 Ensure Access to Audit Records Is Controlled
  • 3.6 Ensure Firewall Logging Is Enabled and Configured
  • 5.1.4 Ensure Appropriate Permissions Are Enabled for System Wide Applications
  • 5.1.5 Ensure No World Writable Folders Exist in the System Folder
  • 5.3 Ensure the Sudo Timeout Period Is Set to Zero
  • 5.4 Ensure a Separate Timestamp Is Enabled for Each User/tty Combo
Miscellaneous
  • Metadata updated.
  • Variables updated.