Title

The macOS system must employ automated mechanisms to determine the state of system components. (Cat II impact)

Discussion

The macOS system must employ automated mechanisms to determine the state of system components. The DOD requires the installation and use of an approved endpoint security solution to be implemented on the operating system. For additional information, reference all applicable OPORDs and FRAGOs on SIPRNet.

Check Content

Verify the macOS system is configured with automated mechanisms to determine the state of system components. Ask the system administrator (SA) or information system security officer (ISSO) if the approved endpoint security solution is loaded on the system. If the installed components of the endpoint security solution are not at the DOD-approved minimal versions, this is a finding.

Fix Text

Install the approved endpoint security solution onto the system.

Additional Identifiers

Rule ID: SV-259426r940900_rule

Vulnerability ID: V-259426

Group Title: SRG-OS-000191-GPOS-00080

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.