| APPL-15-001029 - The macOS system must configure audit retention to seven days. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-15-001030 - The macOS system must configure audit capacity warning. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-15-002005 - The macOS system must disable Bonjour multicast. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-002007 - The macOS system must disable Internet Sharing. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-002012 - The macOS system must disable the iCloud Calendar services. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-002015 - The macOS system must disable iCloud Mail. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-002017 - The macOS system must disable the camera. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-002037 - The macOS system must disable iCloud storage setup during Setup Assistant. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-002041 - The macOS system must disable iCloud Document Sync. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-002063 - The macOS system must disable the guest account. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-002170 - The macOS system must disable iCloud Private Relay. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-002200 - The macOS system must disable Personalized Advertising. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-002260 - The macOS system must disable the Bluetooth System Settings pane. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-003014 - The macOS system must remove password hints from user accounts. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-15-003060 - The macOS system must require that passwords contain a minimum of one lowercase character and one uppercase character. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-15-003070 - The macOS system must set minimum password lifetime to 24 hours. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-15-003080 - The macOS system must disable accounts after 35 days of inactivity. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | ACCESS CONTROL |
| APPL-15-004002 - The macOS system must configure Apple System Log (ASL) files to mode 640 or less permissive. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| APPL-15-004030 - The macOS system must configure system log files owned by root and group to wheel. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| APPL-15-004040 - The macOS system must configure system log files to mode 640 or less permissive. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| APPL-15-004060 - The macOS system must configure sudoers timestamp type. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-15-005001 - The macOS system must ensure System Integrity Protection is enabled. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-15-005020 - The macOS system must enforce FileVault. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-15-005050 - The macOS system must enable macOS Application Firewall. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-005052 - The macOS system must configure the login window to prompt for username and password. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-15-005060 - The macOS system must disable proximity-based password sharing requests. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-999999 - The macOS system must install security-relevant software updates within 30 days unless the time period is directed by an authoritative source (e.g., IAVM, CTOs, DTMs, STIGs). | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| APPL-26-000053 - The macOS system must set login grace time to 30. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-26-000100 - The macOS system must disable root login. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION |
| APPL-26-000190 - The macOS system must configure sudo to log events. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-001002 - The macOS system must be configured to audit all login and logout events. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MAINTENANCE |
| APPL-26-001012 - The macOS system must configure audit log files to be owned by root. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-001013 - The macOS system must configure audit log folders to be owned by root. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-001016 - The macOS system must configure audit log files to mode 440 or less permissive. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-001044 - The macOS system must be configured to audit all authorization and authentication events. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY, MAINTENANCE |
| APPL-26-001100 - The macOS system must disable root login for SSH. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-001110 - The macOS system must configure audit_control group to wheel. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-002001 - The macOS system must disable Server Message Block (SMB) sharing. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL |
| APPL-26-002004 - The macOS system must disable Location Services. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002008 - The macOS system must disable the built-in web server. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL |
| APPL-26-002014 - The macOS system must disable iCloud Address Book. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002036 - The macOS system must disable Privacy Setup services during Setup Assistant. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002037 - The macOS system must disable iCloud storage setup during Setup Assistant. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002110 - The macOS system must disable Bluetooth Sharing. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| APPL-26-002120 - The macOS system must disable AppleID and internet Account Modification. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-002200 - The macOS system must disable Personalized Advertising. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-003008 - The macOS system must restrict maximum password lifetime to 180 days. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-26-003011 - The macOS system must require that passwords contain a minimum of one special character. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-26-003050 - The macOS system must enforce multifactor authentication for login. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-26-004002 - The macOS system must configure Apple System Log (ASL) files to mode 640 or less permissive. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | SYSTEM AND INFORMATION INTEGRITY |
