Vulnerability Discussion

The macOS system must employ automated mechanisms to determine the state of system components. The DOD requires the installation and use of an approved endpoint security solution to be implemented on the operating system. For additional information, reference all applicable OPORDs and FRAGOs on SIPRNet.

Check

Verify the macOS system is configured with automated mechanisms to determine the state of system components.

Ask the system administrator (SA) or information system security officer (ISSO) if the approved endpoint security solution is loaded on the system.

If the installed components of the endpoint security solution are not at the DOD-approved minimal versions, this is a finding.

Fix

Install the approved endpoint security solution onto the system.