Hi All,
NIST just published for comment NIST SP 800-219r1 ipd Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP)
Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP). It provides resources that system administrators, security professionals, security policy authors, information security officers, and auditors can leverage to secure and assess macOS desktop and laptop system security in an automated way.
This publication introduces the mSCP, describes use cases for leveraging the mSCP content, and introduces a new feature of the mSCP that allows organizations to customize security rules more easily. The draft also gives an overview of the resources available on the project's GitHub site, which provides practical, actionable recommendations in the form of secure baselines and associated rules and is continuously updated to support each new release of macOS.
The public comment period is open through April 27, 2023. See the publication details (https://csrc.nist.gov/publications/detail/sp/800-219/rev-1/draft) for a copy of the draft and instructions for submitting comments.
------------------------------
Michael Roza CPA, CISA, CIA, CC, MBA, Exec MBA
------------------------------