| APPL-14-000014 - The macOS system must enforce time synchronization. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-14-000023 - The macOS system must display the Standard Mandatory DOD Notice and Consent Banner at remote log on. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | ACCESS CONTROL |
| APPL-14-000031 - The macOS system must configure audit log folders to not contain access control lists. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-14-000054 - The macOS system must limit SSHD to FIPS-compliant connections. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-14-000130 - The macOS system must configure SSHD unused connection timeout to 900. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-14-001001 - The macOS system must be configured to audit all administrative action events. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT, MAINTENANCE |
| APPL-14-001022 - The macOS system must be configured to audit all failed read actions on the system. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-14-001029 - The macOS system must configure audit retention to seven days. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-14-001044 - The macOS system must configure the system to audit all authorization and authentication events. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT, MAINTENANCE |
| APPL-14-001130 - The macOS system must configure audit_control to mode 440 or less permissive. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-14-001150 - The macOS system must disable password authentication for SSH. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | IDENTIFICATION AND AUTHENTICATION, MAINTENANCE |
| APPL-14-002016 - The macOS system must disable iCloud Notes. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-002038 - The macOS system must disable Trivial File Transfer Protocol service. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| APPL-14-002051 - The macOS system must disable the TouchID System Settings pane. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-002053 - The macOS system must disable the system settings pane for Siri. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-002250 - The macOS system must disable Remote Management. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-003007 - The macOS system must require passwords contain a minimum of one numeric character. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-14-003011 - The macOS system must require passwords contain a minimum of one special character. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-14-003052 - The macOS system must enforce multifactor authentication for privilege escalation through the sudo command. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-14-003060 - The macOS system must require passwords contain a minimum of one lowercase character and one uppercase character. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-14-003080 - The macOS system must disable accounts after 35 days of inactivity. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-14-005061 - The macOS system must disable Erase Content and Settings. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-000005 - The macOS system must configure user session lock when a smart token is removed. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | ACCESS CONTROL |
| APPL-15-000009 - The macOS system must prevent AdminHostInfo from being available at LoginWindow. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | ACCESS CONTROL |
| APPL-15-000022 - The macOS system must limit consecutive failed login attempts to three. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | ACCESS CONTROL |
| APPL-15-000024 - The macOS system must enforce SSH to display a policy banner. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | ACCESS CONTROL |
| APPL-15-000025 - The macOS system must display the Standard Mandatory DoW Notice and Consent Banner at the login window. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | ACCESS CONTROL |
| APPL-15-000090 - The macOS system must disable login to other users' active and locked sessions. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-26-000009 - The macOS system must prevent AdminHostInfo from being available at LoginWindow. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL |
| APPL-26-000014 - The macOS system must enforce time synchronization. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-000051 - The macOS system must configure SSHD ClientAliveInterval to 900. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-26-000054 - The macOS system must limit SSHD to FIPS-compliant connections. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-26-000060 - The macOS system must set account lockout time to 15 minutes. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL |
| APPL-26-000160 - The macOS system must enforce auto logout after 86400 seconds of inactivity. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL |
| APPL-26-001014 - The macOS system must configure the audit log files group to wheel. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-001140 - The macOS system must configure audit_control to not contain access control lists (ACLs). | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-002006 - The macOS system must disable Unix-to-Unix Copy Protocol (UUCP) service. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL |
| APPL-26-002012 - The macOS system must disable the iCloud Calendar services. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002015 - The macOS system must disable iCloud Mail. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002043 - The macOS system must disable iCloud Photo Library. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002063 - The macOS system must disable the guest account. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002066 - The macOS system must disable unattended or automatic login to the system. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION |
| APPL-26-002180 - The macOS system must disable Find My service. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-003012 - The macOS system must disable password hints. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-26-003060 - The macOS system must require that passwords contain a minimum of one lowercase character and one uppercase character. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-26-004022 - The macOS system must require users to reauthenticate for privilege escalation when using the "sudo" command. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-26-005061 - The macOS system must disable Erase Content and Settings. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-006000 - The macOS system must be a version supported by the vendor. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | SYSTEM AND SERVICES ACQUISITION |
| APPL-26-999999 - The macOS system must install security-relevant software updates within 30 days unless the time period is directed by an authoritative source (e.g., IAVM, CTOs, DTMs, STIGs). | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| WPAW-00-001000 - The Windows PAW must be configured so that all non-administrative-related applications and functions are blocked or removed from the PAW platform, including but not limited to email, Internet browsing, and line-of-business applications. | DISA Microsoft Windows PAW STIG v3r2 | Windows | CONFIGURATION MANAGEMENT |
