| APPL-14-000052 - The macOS system must configure SSHD ClientAliveCountMax to 1. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-14-000057 - The macOS system must limit SSH to FIPS-compliant connections. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-14-001023 - The macOS system must be configured to audit all failed write actions on the system. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-14-002012 - The macOS system must disable the iCloud Calendar services. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-002015 - The macOS system must disable iCloud Mail. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-002041 - The macOS system must disable iCloud Document synchronization. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-002042 - The macOS system must disable iCloud Bookmarks. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-002062 - The macOS system must disable Bluetooth when no approved device is connected. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-14-002063 - The macOS system must disable the guest account. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-002066 - The macOS system must disable unattended or automatic log on to the system. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-002120 - The macOS system must disable AppleID and Internet Account modifications. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-002220 - The macOS system must enforce on device dictation. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-002270 - The macOS system must disable the iCloud Freeform services. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-003050 - The macOS system must enforce multifactor authentication for logon. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-14-003070 - The macOS system must set minimum password lifetime to 24 hours. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-14-004030 - The macOS system must configure system log files to be owned by root and group to wheel. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| APPL-14-005055 - The macOS system must disable Screen Time prompt during Setup Assistant. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-005060 - The macOS system must disable proximity-based password sharing requests. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-000003 - The macOS system must enforce session lock no more than five seconds after screen saver is started. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | ACCESS CONTROL |
| APPL-15-000007 - The macOS system must disable hot corners. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | ACCESS CONTROL |
| APPL-15-000014 - The macOS system must enforce time synchronization. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-15-000031 - The macOS system must configure the audit log folder to not contain access control lists (ACLs). | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-15-000054 - The macOS system must limit SSHD to FIPS-compliant connections. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-15-000057 - The macOS system must limit SSH to FIPS-compliant connections. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-15-000100 - The macOS system must disable root login. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION |
| APPL-15-000140 - The macOS system must set SSH Active Server Alive Maximum to 0. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-15-000190 - The macOS system must configure sudo to log events. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-15-001010 - The macOS system must be configured to shut down upon audit failure. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-15-001023 - The macOS system must be configured to audit all failed write actions on the system. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | AUDIT AND ACCOUNTABILITY, MAINTENANCE |
| APPL-15-001024 - The macOS system must be configured to audit all failed program execution on the system. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-15-001044 - The macOS system must be configured to audit all authorization and authentication events. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | AUDIT AND ACCOUNTABILITY, MAINTENANCE |
| APPL-15-001150 - The macOS system must disable password authentication for SSH. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | IDENTIFICATION AND AUTHENTICATION, MAINTENANCE |
| APPL-15-002013 - The macOS system must disable iCloud Reminders. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-002020 - The macOS system must disable Siri. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-002036 - The macOS system must disable Privacy Setup services during Setup Assistant. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-002038 - The macOS system must disable Trivial File Transfer Protocol (TFTP) service. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| APPL-15-002043 - The macOS system must disable iCloud Photo Library. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-002150 - The macOS system must disable iCloud Desktop and Document folder sync. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-002220 - The macOS system must enforce On Device Dictation. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-003008 - The macOS system must restrict maximum password lifetime to 180 days. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-15-003050 - The macOS system must enforce multifactor authentication for login. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-15-003051 - The macOS system must enforce multifactor authentication for the su command. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-15-003052 - The macOS system must enforce multifactor authentication for privilege escalation through the sudo command. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | IDENTIFICATION AND AUTHENTICATION |
| APPL-15-005054 - The macOS system must disable the TouchID prompt during Setup Assistant. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-15-005130 - The macOS system must enforce installation of XProtect Remediator and Gatekeeper updates automatically. | DISA Apple macOS 15 Sequoia STIG v1r8 | Unix | CONFIGURATION MANAGEMENT |
| APPL-26-000009 - The macOS system must prevent AdminHostInfo from being available at LoginWindow. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL |
| APPL-26-000014 - The macOS system must enforce time synchronization. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | AUDIT AND ACCOUNTABILITY |
| APPL-26-000051 - The macOS system must configure SSHD ClientAliveInterval to 900. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-26-000054 - The macOS system must limit SSHD to FIPS-compliant connections. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION |
| APPL-26-000060 - The macOS system must set account lockout time to 15 minutes. | DISA Apple macOS 26 Tahoe STIG v1r4 | Unix | ACCESS CONTROL |
