A configuration profile must be installed.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-67563	AOSX-11-000455	SV-82053r1_rule		Medium

Description
Configuration settings must be verified by a centrally managed system such as an MDM to ensure that they have not been changed. Configuration settings are the configurable security-related parameters of information technology products that are part of the information system. Security-related parameters are those parameters impacting the security state of the system including parameters related to meeting other security control requirements. Rather than visiting each and every system when verifying configuration changes, organizations will employ automated tools that can make changes across all systems. This greatly increases efficiency and manageability of applications in a large scale environment.

Description

Configuration settings must be verified by a centrally managed system such as an MDM to ensure that they have not been changed. Configuration settings are the configurable security-related parameters of information technology products that are part of the information system. Security-related parameters are those parameters impacting the security state of the system including parameters related to meeting other security control requirements. Rather than visiting each and every system when verifying configuration changes, organizations will employ automated tools that can make changes across all systems. This greatly increases efficiency and manageability of applications in a large scale environment.

STIG	Date
Apple OS X 10.11 Security Technical Implementation Guide	2018-01-04

Details

Check Text ( C-68129r3_chk )
To check if the system has a configuration profile applied, run the following command: sudo /usr/bin/profiles -H If there are no profiles installed, this is a finding.

Fix Text (F-73677r1_fix)
Obtain a configuration profile from an MDM or trusted provider containing the configuration settings required to be applied.