CIS Apple macOS 10.15 Benchmark

[yann_palacios]

Hi!!!

For your information, finally we have the new versions for macOS 10.14 and 10.15

https://www.cisecurity.org/benchmark/apple_os/

I contacted with CIS and they are already working to include the new xml benchmark under CIS CAT tool

[T_Armstrong]

Any idea from Jamf's end of how soon the Jamf CIS policies may be updated to match? Just downloaded and starting to read to compare any differences.... a set of config profiles would make this a LOT simpler to deploy.

[LeeGibson]

I watched the webinar macOS Security Benchmarks and they mentioned about having scripts, policies, and EA's on GitHub, but nothing there about Catalina at all. I wonder if they have a timeline as to when these items will be added and a configuration profile template would make life much easier! @erinmcd

[jimmy-swings]

Is there a direct link to this document? I've registered a couple of times but still waiting for the email.

[Tribruin]

@jaz did you check your spam filter. At my company we use spam filtering software (proof point) and it marked my link email as SPAM. I had to manually release it.

[obi-k]

Looks like Jamf updated CIS-for-macOS-Catalina-CP. Not sure who to thank at Jamf, but thanks for that hard work.

CIS 10.15

[jeho]

Does this work for Big Sur? Anyone with an updated one? Thanks

[LeeGibson]

@jeho CIS has a benchmark for Big Sur

[jeho]

@LeeGibson I dont see it on the Github from Jamf, is is possible to share the link for the config profiles/ea like whats shared above? Thanks!

[LeeGibson]

@jeho As far as the Jamf GitHub, I am not sure, but here is the CIS 11.0.

https://workbench.cisecurity.org/benchmarks/6861

[Forseti]

I've used the cissecurity.org documentation to make some updates to the JAMF scripts. I've only updated the ones that were relevant to my use for the moment, but you can get there here:
https://github.com/dgkavanagh/CIS-for-macOS-BigSur-Intel-M1

[MatG]

What has happened to CIS CAT Lite? I cant seem to find a download.