Detections
Analytics

1.139 APPL-26-005020

Information

The macOS system must enforce FileVault.

GROUP ID: V-277166
RULE ID: SV-277166r1148950

The information system implements cryptographic mechanisms to protect the confidentiality and integrity of information stored on digital media during transport outside of controlled areas.

Satisfies: SRG-OS-000185-GPOS-00079, SRG-OS-000404-GPOS-00183, SRG-OS-000405-GPOS-00184

Solution

Refer to the FileVault supplemental to implement this rule. Configure the macOS system to enforce FileVault by installing the "com.apple.MCX" configuration profile.

See Also

https://workbench.cisecurity.org/benchmarks/26538

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-28, 800-53|SC-28(1), CCI|CCI-001199, CCI|CCI-002475, CCI|CCI-002476, Rule-ID|SV-277166r1148950_rule, STIG-ID|APPL-26-005020, Vuln-ID|V-277166

Plugin: Unix

Control ID: c4f23c626ac38f52b44f433fea6613131df502d1bdebea949faa60c29b22b9b7