Revision 1.2Oct 31, 2025

Functional Update
  • 5.2.1 Ensure Password Account Lockout Threshold Is Configured
Informational Update
  • 1.1 Ensure All Apple-provided Software Is Current
  • 2.1.1 Ensure Firewall Is Enabled
  • 2.2.1.1 Ensure Set Time and Date Automatically Is Enabled
  • 2.3.2 Ensure Limit Ad Tracking Is Enabled
  • 2.4.1 Ensure an Inactivity Interval of 20 Minutes Or Less for the Screen Saver Is Enabled
  • 2.5.1 Ensure Users' Accounts Do Not Have a Password Hint
  • 3.1 Ensure Security Auditing Is Enabled
  • 3.5 Ensure Access to Audit Records Is Controlled
  • 3.6 Ensure Firewall Logging Is Enabled and Configured
  • 5.3 Ensure the Sudo Timeout Period Is Set to Zero
  • 5.4 Ensure a Separate Timestamp Is Enabled for Each User/tty Combo
Miscellaneous
  • Metadata updated.
  • Variables updated.