1.2 APPL-15-000002

Information

The macOS system must enforce screen saver password.

GROUP ID: V-268421
RULE ID: SV-268421r1034203

Users must authenticate when unlocking the screen saver.

The screen saver acts as a session lock and prevents unauthorized users from accessing the current user's account.

Solution

Configure the macOS system to prompt users to enter a password to unlock the screen saver by installing the "com.apple.screensaver" configuration profile.

See Also

https://workbench.cisecurity.org/benchmarks/23761