Revision 1.2Oct 31, 2025
Functional Update
- 5.2.1 Ensure Password Account Lockout Threshold Is Configured
Informational Update
- 1.1 Ensure All Apple-provided Software Is Current
- 2.1.1 Ensure Firewall Is Enabled
- 2.2.1.1 Ensure Set Time and Date Automatically Is Enabled
- 2.3.2 Ensure Limit Ad Tracking Is Enabled
- 2.4.1 Ensure an Inactivity Interval of 20 Minutes Or Less for the Screen Saver Is Enabled
- 2.5.1 Ensure Users' Accounts Do Not Have a Password Hint
- 3.1 Ensure Security Auditing Is Enabled
- 3.5 Ensure Access to Audit Records Is Controlled
- 3.6 Ensure Firewall Logging Is Enabled and Configured
- 5.3 Ensure the Sudo Timeout Period Is Set to Zero
- 5.4 Ensure a Separate Timestamp Is Enabled for Each User/tty Combo
Miscellaneous
- Metadata updated.
- Variables updated.