What Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) requires
This publication introduces the macOS Security Compliance Project (mSCP), an open-source initiative by the National Institute of Standards and Technology (NIST) designed to provide security configuration guidance for Apple macOS in a machine-consumable format. The mSCP provides resources that system administrators, security professionals, security policy authors, information security officers, and auditors can leverage to secure and assess macOS desktop and laptop system security in an automated way. The project, hosted on GitHub, offers practical, actionable recommendations through secure baselines and associated rules, which are continuously curated and updated to support new macOS releases. The mSCP seeks to simplify the macOS security development cycle by reducing the effort required to implement security baselines, which are groups of settings used to configure a system to meet a target level or set of requirements. This specific publication, NIST SP 800-219, has been formally withdrawn as of July 20, 2023, and is provided for historical purposes only. It has been superseded in its entirety by SP 800-219r1. The project's content maps macOS settings to various security standards, including NIST SP 800-53, NIST SP 800-171, and the DISA Security Technical Implementation Guide (STIG). Organizations are advised to use the mSCP's content with a risk-based approach, selecting appropriate settings and tailoring baselines to meet their specific security requirements.
Pillar: Cybersecurity · Authority: National Institute of Standards and Technology (NIST) · Version: 1.0.0 · Last updated:
Primary source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-219.pdf
SHA-256 integrity: 49cefae945ace7efcf88e7f64d7304974f1ceb89756d2f5ba7ec2bc6d21b4930
Primary Citations — 8 traced to source
- Section 1.1: The release of NIST SP 800-219 formally deprecates NIST SP 800-179 [2] and SP 800-179, Revision 1 [3].
- Section 1.3: As NIST SP 800-70, Revision 4 [4] explains, federal agencies are required to use appropriate security configuration checklists from the National Checklist Program when available.
+ 6 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/nist-sp-800-219-macos-mscp.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/nist-sp-800-219-macos-mscp.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/nist-sp-800-219-macos-mscp
- Back to registry: Browse all 10,090 compliance nodes