1.2 APPL-14-000002

Information

The macOS system must enforce screen saver password.

GROUP ID: V-259419RULE ID: SV-259419r958400

Users must authenticate when unlocking the screen saver.

The screen saver acts as a session lock and prevents unauthorized users from accessing the current user's account.

Solution

Configure the macOS system to prompt users to enter a password to unlock the screen saver by installing the "com.apple.screensaver" configuration profile.

See Also

https://workbench.cisecurity.org/benchmarks/24070