| 1.52 APPL-15-001060 | CIS Apple macOS 15 Sequoia STIG v1.1.0 CAT II | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.94 APPL-14-002068 | CIS Apple macOS 14 Sonoma STIG v1.0.0 CAT II | Unix | CONFIGURATION MANAGEMENT |
| 1.145 APPL-26-005058 | CIS Apple macOS 26 Tahoe STIG v1.0.0 CAT II | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| 1.147 APPL-15-005058 | CIS Apple macOS 15 Sequoia STIG v1.1.0 CAT II | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| 2.6.1 Ensure 'Allow user to move messages from this account' is set to 'Disabled' | AirWatch - CIS Apple iOS 12 v1.0.0 End User Owned L1 | MDM | CONFIGURATION MANAGEMENT |
| 2.6.1 Ensure 'Allow user to move messages from this account' is set to 'Disabled' | MobileIron - CIS Apple iOS 13 and iPadOS 13 v1.0.0 End User Owned L1 | MDM | ACCESS CONTROL |
| 3.2.1.1 Ensure 'Allow screenshots and screen recording' is set to 'Disabled' | MobileIron - CIS Apple iOS 10 v2.0.0 Institution Owned L2 | MDM | ACCESS CONTROL |
| 3.2.1.1 Ensure 'Allow screenshots and screen recording' is set to 'Disabled' | AirWatch - CIS Apple iOS 12 v1.0.0 Institution Owned L2 | MDM | CONFIGURATION MANAGEMENT |
| 3.2.1.1 Ensure 'Allow screenshots and screen recording' is set to 'Disabled' | MobileIron - CIS Apple iOS 12 v1.0.0 Institution Owned L2 | MDM | ACCESS CONTROL |
| 3.2.1.1 Ensure 'Allow screenshots and screen recording' is set to 'Disabled' | AirWatch - CIS Apple iOS 13 and iPadOS 13 Institution Owned L2 | MDM | ACCESS CONTROL |
| 3.2.1.22 Ensure 'Require Touch ID / Face ID authentication before AutoFill' is set to 'Enabled' | AirWatch - CIS Apple iOS 13 and iPadOS 13 Institution Owned L1 | MDM | ACCESS CONTROL |
| 3.2.2.2 Ensure 'Accept cookies' is set to 'From websites I visit' or `From current website only` | AirWatch - CIS Apple iOS 12 v1.0.0 Institution Owned L1 | MDM | |
| 3.2.2.2 Ensure 'Accept cookies' is set to 'From websites I visit' or `From current website only` | MobileIron - CIS Apple iOS 12 v1.0.0 Institution Owned L1 | MDM | ACCESS CONTROL |
| 3.4.3 Ensure 'Maximum Auto-Lock' is set to '2 minutes' or less | MobileIron - CIS Apple iOS 10 v2.0.0 Institution Owned L1 | MDM | ACCESS CONTROL |
| 3.4.3 Ensure 'Maximum Auto-Lock' is set to '2 minutes' or less | MobileIron - CIS Apple iOS 12 v1.0.0 Institution Owned L1 | MDM | ACCESS CONTROL |
| 3.4.3 Ensure 'Maximum Auto-Lock' is set to '2 minutes' or less | MobileIron - CIS Apple iOS 11 v1.0.0 Institution Owned L1 | MDM | ACCESS CONTROL |
| 4.4 Ensure 'Find My iPhone/iPad' is set to 'Enabled' on end-user owned devices | AirWatch - CIS Apple iOS 10 v2.0.0 End User Owned L1 | MDM | |
| APPL-14-002064 - The macOS system must enable Gatekeeper. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-005120 - The macOS system must enable recovery lock. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-001060 - The macOS system must set smart card certificate trust to moderate. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-15-002064 - The macOS system must enable gatekeeper. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-999999 - The macOS system must install security-relevant software updates within 30 days unless the time period is directed by an authoritative source (e.g., IAVM, CTOs, DTMs, STIGs). | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| APPL-26-000053 - The macOS system must set login grace time to 30. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-26-000100 - The macOS system must disable root login. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION |
| APPL-26-000190 - The macOS system must configure sudo to log events. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-001002 - The macOS system must be configured to audit all login and logout events. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE |
| APPL-26-001012 - The macOS system must configure audit log files to be owned by root. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-001013 - The macOS system must configure audit log folders to be owned by root. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-001016 - The macOS system must configure audit log files to mode 440 or less permissive. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-001044 - The macOS system must be configured to audit all authorization and authentication events. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY, MAINTENANCE |
| APPL-26-001060 - The macOS system must set smart card certificate trust to moderate. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-26-001100 - The macOS system must disable root login for SSH. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-001110 - The macOS system must configure audit_control group to wheel. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-002001 - The macOS system must disable Server Message Block (SMB) sharing. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL |
| APPL-26-002004 - The macOS system must disable Location Services. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002008 - The macOS system must disable the built-in web server. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL |
| APPL-26-002014 - The macOS system must disable iCloud Address Book. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002036 - The macOS system must disable Privacy Setup services during Setup Assistant. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002037 - The macOS system must disable iCloud storage setup during Setup Assistant. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002110 - The macOS system must disable Bluetooth Sharing. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| APPL-26-002120 - The macOS system must disable AppleID and internet Account Modification. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002200 - The macOS system must disable Personalized Advertising. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-003008 - The macOS system must restrict maximum password lifetime to 180 days. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-26-003011 - The macOS system must require that passwords contain a minimum of one special character. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-26-003050 - The macOS system must enforce multifactor authentication for login. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-26-004002 - The macOS system must configure Apple System Log (ASL) files to mode 640 or less permissive. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| APPL-26-005050 - The macOS system must enable macOS Application Firewall. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| EX19-MB-000007 - Exchange must use encryption for Outlook Web App (OWA) access. | DISA Microsoft Exchange 2019 Mailbox Server STIG v2r3 | Windows | ACCESS CONTROL |
| Monterey - Enable Recovery Lock | NIST macOS Monterey v1.0.0 - 800-171 | Unix | ACCESS CONTROL |
| Monterey - Enable Recovery Lock | NIST macOS Monterey v1.0.0 - 800-53r5 High | Unix | ACCESS CONTROL |
