Catalina - Configure macOS to Use an Authorized Time Server
Approved time servers _MUST_ be the only servers configured for use. This rule ensures the uniformity of time stamps for information systems with multiple system clocks and systems connected over a network.
This is implemented by a Configuration Profile. mobileconfig profile info: com.apple.MCX: timeServer: time-a.nist.gov,time-b.nist.gov