Detections
Analytics

DISA Apple macOS 14 Sonoma STIG v2r4

Audit Details

Name: DISA Apple macOS 14 Sonoma STIG v2r4

Updated: 3/5/2026

Authority: DISA STIG

Plugin: Unix

Revision: 1.1

Estimated Item Count: 157

File Details

Filename: DISA_STIG_Apple_macOS_14_Sonoma_v2r4.audit

Size: 312 kB

MD5: b71d9ec3de6d872a1114ca063a3dc1f7
SHA256: 06d5b55849f61118b911d2d36f2251dec80c346bbbae660bbce1d23a0f548a0c

Audit Changelog

 
Revision 1.1

Mar 5, 2026

Functional Update
  • APPL-14-000001 - The macOS system must prevent Apple Watch from terminating a session lock.
  • APPL-14-000002 - The macOS system must enforce screen saver password.
  • APPL-14-000009 - The macOS system must prevent AdminHostInfo from being available at LoginWindow.
  • APPL-14-000014 - The macOS system must enforce time synchronization.
  • APPL-14-000033 - The macOS system must disable FileVault automatic log on.
  • APPL-14-002005 - The macOS system must disable Bonjour multicast.
  • APPL-14-002007 - The macOS system must disable Internet Sharing.
  • APPL-14-002009 - The macOS system must disable AirDrop.
  • APPL-14-002010 - The macOS system must disable FaceTime.app.
  • APPL-14-002012 - The macOS system must disable the iCloud Calendar services.
  • APPL-14-002013 - The macOS system must disable iCloud Reminders.
  • APPL-14-002014 - The macOS system must disable iCloud Address Book.
  • APPL-14-002015 - The macOS system must disable iCloud Mail.
  • APPL-14-002016 - The macOS system must disable iCloud Notes.
  • APPL-14-002017 - The macOS system must disable the camera.
  • APPL-14-002020 - The macOS system must disable Siri.
  • APPL-14-002021 - The macOS system must disable sending diagnostic and usage data to Apple.
  • APPL-14-002035 - The macOS system must disable Apple ID setup during Setup Assistant.
  • APPL-14-002036 - The macOS system must disable Privacy Setup services during Setup Assistant.
  • APPL-14-002037 - The macOS system must disable iCloud Storage Setup during Setup Assistant.
  • APPL-14-002039 - The macOS system must disable Siri Setup during Setup Assistant.
  • APPL-14-002040 - The macOS system must disable iCloud Keychain synchronization.
  • APPL-14-002041 - The macOS system must disable iCloud Document synchronization.
  • APPL-14-002042 - The macOS system must disable iCloud Bookmarks.
  • APPL-14-002043 - The macOS system must disable iCloud Photo Library.
  • APPL-14-002062 - The macOS system must disable Bluetooth when no approved device is connected.
  • APPL-14-002063 - The macOS system must disable the guest account.
  • APPL-14-002066 - The macOS system must disable unattended or automatic log on to the system.
  • APPL-14-002080 - The macOS system must disable Airplay Receiver.
  • APPL-14-002090 - The macOS system must disable TouchID for unlocking the device.
  • APPL-14-002120 - The macOS system must disable AppleID and Internet Account modifications.
  • APPL-14-002140 - The macOS system must disable content caching service.
  • APPL-14-002150 - The macOS system must disable iCloud desktop and document folder synchronization.
  • APPL-14-002160 - The macOS system must disable iCloud Game Center.
  • APPL-14-002170 - The macOS system must disable iCloud Private Relay.
  • APPL-14-002180 - The macOS system must disable Find My service.
  • APPL-14-002190 - The macOS system must disable password autofill.
  • APPL-14-002200 - The macOS system must disable personalized advertising.
  • APPL-14-002220 - The macOS system must enforce on device dictation.
  • APPL-14-002230 - The macOS system must disable dictation.
  • APPL-14-002270 - The macOS system must disable the iCloud Freeform services.
  • APPL-14-003020 - The macOS system must enforce smart card authentication.
  • APPL-14-003030 - The macOS system must allow smart card authentication.
  • APPL-14-005020 - The macOS system must enforce FileVault.
  • APPL-14-005050 - The macOS system must enable the application firewall.
  • APPL-14-005052 - The macOS system must configure login window to prompt for username and password.
  • APPL-14-005054 - The macOS system must disable TouchID prompt during Setup Assistant.
  • APPL-14-005055 - The macOS system must disable Screen Time prompt during Setup Assistant.
  • APPL-14-005056 - The macOS system must disable Unlock with Apple Watch during Setup Assistant.
  • APPL-14-005058 - The macOS system must disable Handoff.
  • APPL-14-005060 - The macOS system must disable proximity-based password sharing requests.
  • APPL-14-005061 - The macOS system must disable Erase Content and Settings.
  • APPL-14-005080 - The macOS system must prohibit user installation of software into /users/.
  • APPL-14-005090 - The macOS system must authorize USB devices before allowing connection.
  • APPL-14-005130 - The macOS system must enforce installation of XProtect Remediator and Gatekeeper updates automatically.
Miscellaneous
  • Metadata updated.