CIS Apple macOS 10.15 Benchmark

yann_palacios
New Contributor II

Hi!!!

For your information, finally we have the new versions for macOS 10.14 and 10.15

https://www.cisecurity.org/benchmark/apple_os/

I contacted with CIS and they are already working to include the new xml benchmark under CIS CAT tool

11 REPLIES 11

T_Armstrong
Contributor

Any idea from Jamf's end of how soon the Jamf CIS policies may be updated to match? Just downloaded and starting to read to compare any differences.... a set of config profiles would make this a LOT simpler to deploy.

LeeGibson
New Contributor III

I watched the webinar macOS Security Benchmarks and they mentioned about having scripts, policies, and EA's on GitHub, but nothing there about Catalina at all. I wonder if they have a timeline as to when these items will be added and a configuration profile template would make life much easier! @erinmcd

jimmy-swings
Contributor II

Is there a direct link to this document? I've registered a couple of times but still waiting for the email.

Tribruin
Valued Contributor II

@jaz did you check your spam filter. At my company we use spam filtering software (proof point) and it marked my link email as SPAM. I had to manually release it.

obi-k
Valued Contributor II

Looks like Jamf updated CIS-for-macOS-Catalina-CP. Not sure who to thank at Jamf, but thanks for that hard work.

CIS 10.15

jeho
New Contributor

Does this work for Big Sur? Anyone with an updated one? Thanks

LeeGibson
New Contributor III

@jeho CIS has a benchmark for Big Sur

jeho
New Contributor

@LeeGibson I dont see it on the Github from Jamf, is is possible to share the link for the config profiles/ea like whats shared above? Thanks!

LeeGibson
New Contributor III

@jeho As far as the Jamf GitHub, I am not sure, but here is the CIS 11.0.

https://workbench.cisecurity.org/benchmarks/6861

Forseti
New Contributor

I've used the cissecurity.org documentation to make some updates to the JAMF scripts. I've only updated the ones that were relevant to my use for the moment, but you can get there here:
https://github.com/dgkavanagh/CIS-for-macOS-BigSur-Intel-M1

MatG
Contributor III

What has happened to CIS CAT Lite? I cant seem to find a download.