Revision 1.2Oct 31, 2025

Functional Update
  • 5.2.1 Ensure Password Account Lockout Threshold Is Configured
Informational Update
  • 1.1 Ensure All Apple-provided Software Is Current
  • 2.10.3 Ensure Wake for Network Access Is Disabled
  • 2.2.1 Ensure Firewall Is Enabled
  • 2.2.2 Ensure Firewall Stealth Mode Is Enabled
  • 2.5.2.1 Ensure Siri Is Disabled
  • 3.1 Ensure Security Auditing Is Enabled
  • 3.5 Ensure Access to Audit Records Is Controlled
  • 5.1.2 Ensure System Integrity Protection Status (SIP) Is Enabled
  • 5.11 Ensure Logging Is Enabled for Sudo
  • 5.4 Ensure the Sudo Timeout Period Is Set to Zero
  • 5.5 Ensure a Separate Timestamp Is Enabled for Each User/tty Combo
  • 6.3.9 Audit Pop-up Windows
Miscellaneous
  • Metadata updated.
  • Variables updated.