Detections
Analytics

1.141 APPL-15-005020

Information

The macOS system must enforce FileVault.

GROUP ID: V-268556
RULE ID: SV-268556r1131248

The information system implements cryptographic mechanisms to protect the confidentiality and integrity of information stored on digital media during transport outside of controlled areas.

Satisfies: SRG-OS-000185-GPOS-00079, SRG-OS-000404-GPOS-00183, SRG-OS-000405-GPOS-00184

Solution

Refer to the FileVault supplemental to implement this rule. Configure the macOS system to enforce FileVault by installing the "com.apple.MCX" configuration profile.

See Also

https://workbench.cisecurity.org/benchmarks/26537

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-28, 800-53|SC-28(1), CCI|CCI-001199, CCI|CCI-002475, CCI|CCI-002476, Rule-ID|SV-268556r1131248_rule, STIG-ID|APPL-15-005020, Vuln-ID|V-268556

Plugin: Unix

Control ID: dbfdc41a69c7b17e0746f47be593ecb58e8db1e0cc29a821af7d9353584a551d