Skip to main content
Question

If you follow the CIS Benchmark, do you buy older hardware?

  • July 9, 2019
  • 1 reply
  • 11 views
mvu
Forum|alt.badge.img+22

Hi,

For organizations following the macOS CIS Benchmark, I am wondering how you or your procurement group handles purchasing Macs.

For example, if you put an order in for the 2019 iMac model, it comes with 10.14.4 installed and can't downgrade to approved CIS Benchmarks, which is at 10.13 High Sierra. Once the CIS Benchmark drops, it takes time for our internal security group to approve and lay down their revisions.

How are you folks handling this at your organization? Any hints, gotchas, best practices?

    1 reply

    J
    Forum|alt.badge.img+2
    • joshsw
    • New Contributor
    • July 9, 2019

    We use the CIS benchmark. For newer machines that come with a higher version than the benchmark is designed for I make it match as many of the items as possible. Most times the newer version exceeds the requirements in the benchmark. I then document the differences or items we don't set for our security team who have it for audits

    Terms & ConditionsCookie settingsAccessibility statement