{ "_schema": "https://data.nist.gov/od/dm/nerdm-schema/v0.7#", "@context": [ "https://data.nist.gov/od/dm/nerdm-pub-context.jsonld", { "@base": "ark:/88434/mds2-2246" } ], "@type": [ "nrdp:PublicDataResource", "dcat:Dataset" ], "_extensionSchemas": [ "https://data.nist.gov/od/dm/nerdm-schema/pub/v0.7#/definitions/PublicDataResource" ], "@id": "ark:/88434/mds2-2246", "title": "macOS Security Compliance Project", "contactPoint": { "fn": "Bob Gendler", "hasEmail": "mailto:macadmin@nist.gov" }, "modified": "2020-06-05 00:00:00", "ediid": "ark:/88434/mds2-2246", "landingPage": "https://data.nist.gov/od/id/mds2-2246", "description": [ "The macOS security compliance project is an open source effort to provide a programmatic approach to generating security guidance. This project can be used to create customized security baselines of technical security controls by leveraging a library of atomic actions which are mapped to compliance requirements in existing security guides or used to develop customized guidance. Through the use of a library of atomic actions that enhance security, and mapping them back to existing guides and policies, a single project can support multiple security guides and regulated industry policies while also allowing for documentation and QA to be uniformly managed through a single effort. This approach simplifies, and radically accelerates, the updating of annual security guidance through a unification and standardization of effort.", "Rationale for this project:", "Normalize and accelerate annual adoption of OS/Hardware by having guidance available to meet the needs of new operating systems on release", "Reduce worldwide effort in creating annual guidance by unifying and consolidating compliance efforts into a single project", "Develop a methodology to foster collaboration between baseline authors, reducing overhead and redundancy", "Unify approach in setting controls", "Provide MDM/EMM/security/audit vendors and Apple insight into customer hardening needs", "Important note: This project is a programmatic approach to security policy and can produce output content to be used IN CONJUNCTION with management and security tools to achieve compliance." ], "keyword": [ "macOS", "mac", "security", "compliance", "SCAP", "baseline", "FISMA", "STIG", "OVAL", "XCCDF" ], "theme": [ "Information Technology: Cybersecurity" ], "topic": [ { "@type": "Concept", "scheme": "https://data.nist.gov/od/dm/nist-themes/v1.1", "tag": "Information Technology: Cybersecurity" } ], "references": [ { "@type": [ "npg:Article" ], "@id": "#ref:10.6028/NIST.SP.800-53r4", "refType": "IsCitedBy", "location": "https://doi.org/10.6028/NIST.SP.800-53r4", "_extensionSchemas": [ "https://data.nist.gov/od/dm/nerdm-schema/bib/v0.7#/definitions/DCiteReference" ], "title": "Security and Privacy Controls for Federal Information Systems and Organizations", "issued": "2013-04", "citation": "(2013). Security and Privacy Controls for Federal Information Systems and Organizations. doi:10.6028/nist.sp.800-53r4\n" }, { "@type": [ "npg:Document" ], "@id": "#ref:10.6028/NIST.SP.800-70r4", "refType": "IsSupplementTo", "location": "https://doi.org/10.6028/NIST.SP.800-70r4", "_extensionSchemas": [ "https://data.nist.gov/od/dm/nerdm-schema/bib/v0.7#/definitions/DCiteReference" ], "title": "National checklist program for IT products - guidelines for checklist\n users and developers", "issued": "2018-02", "citation": "Quinn, S. D., Souppaya, M., Cook, M., & Scarfone, K. (2018). National checklist program for IT products - guidelines for checklist\n users and developers. National Institute of Standards and Technology. https://doi.org/10.6028/nist.sp.800-70r4\n" }, { "@type": [ "npg:Document" ], "@id": "#ref:10.6028/NIST.SP.800-219", "refType": "IsSupplementTo", "location": "https://doi.org/10.6028/NIST.SP.800-219", "_extensionSchemas": [ "https://data.nist.gov/od/dm/nerdm-schema/bib/v0.7#/definitions/DCiteReference" ], "title": "Automated secure configuration guidance from the macOS Security Compliance Project (mSCP)", "issued": "2022-06-24", "citation": "Trapnell, M., Trapnell, E., Souppaya, M., Gendler, B., & Scarfone, K. (2022). Automated secure configuration guidance from the macOS Security Compliance Project (mSCP). National Institute of Standards and Technology (U.S.). https://doi.org/10.6028/nist.sp.800-219\n" } ], "accessLevel": "public", "license": "https://www.nist.gov/open/license", "components": [ { "accessURL": "https://github.com/usnistgov/macos_security", "format": { "description": "Contents include scripts, yaml, and SCAP (XCCDF and OVAL) content " }, "description": "macOS Security Compliance Project GitHub repository", "title": "macOS Security Compliance Project", "@type": [ "nrdp:AccessPage", "dcat:Distribution" ], "@id": "#usnistgov/macos_security", "_extensionSchemas": [ "https://data.nist.gov/od/dm/nerdm-schema/pub/v0.7#/definitions/AccessPage" ] }, { "accessURL": "https://doi.org/10.18434/M32246", "title": "DOI Access for macOS Security Compliance Project", "@type": [ "nrd:Hidden", "dcat:Distribution" ], "@id": "#doi:10.18434/M32246" } ], "publisher": { "name": "National Institute of Standards and Technology", "@type": "org:Organization" }, "language": [ "en" ], "bureauCode": [ "006:55" ], "programCode": [ "006:052" ], "doi": "doi:10.18434/M32246", "version": "1.0.10", "issued": "2020-06-15T12:00:24", "versionHistory": [ { "version": "1.0.0", "issued": "2020-06-05 00:00:00", "@id": "ark:/88434/mds2-2246", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246", "description": "initial release" }, { "version": "1.0.1", "issued": "2020-06-05 00:00:00", "@id": "ark:/88434/mds2-2246", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246", "description": "metadata update" }, { "version": "1.0.2", "issued": "2020-06-05 00:00:00", "@id": "ark:/88434/mds2-2246", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246", "description": "metadata update" }, { "version": "1.0.3", "issued": "2020-06-05 00:00:00", "@id": "ark:/88434/mds2-2246", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246", "description": "metadata update" }, { "version": "1.0.4", "issued": "2020-06-05 00:00:00", "@id": "ark:/88434/mds2-2246", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246", "description": "metadata update" }, { "version": "1.0.5", "issued": "2020-06-05", "@id": "ark:/88434/mds2-2246", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246", "description": "metadata update" }, { "version": "1.0.6", "issued": "2020-06-05", "@id": "ark:/88434/mds2-2246", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246", "description": "metadata update" } ], "_editStatus": "done", "authors": [ { "familyName": "Gendler", "fn": "Robert Gendler", "givenName": "Robert", "middleName": "", "affiliation": [ { "title": "National Institute of Standards and Technology", "@type": "org:Organization", "@id": "ror:05xpvk416" } ], "orcid": "", "@type": "foaf:Person" }, { "familyName": "Golbig", "fn": "Allen Golbig", "givenName": "Allen", "middleName": "", "affiliation": [ { "title": "National Aeronautics and Space Administration", "@type": "org:Organization" } ], "orcid": "", "@type": "foaf:Person" }, { "familyName": "Brodjieski", "fn": "Daniel Brodjieski", "givenName": "Daniel", "middleName": "", "affiliation": [ { "title": "Defense Information Systems Agency", "@type": "org:Organization" } ], "orcid": "", "@type": "foaf:Person" }, { "familyName": "Blake", "fn": "Jason Blake", "givenName": "Jason", "middleName": "", "affiliation": [ { "title": "National Institute of Standards and Technology", "@type": "org:Organization", "@id": "ror:05xpvk416" } ], "orcid": "", "@type": "foaf:Person" }, { "familyName": "Heiserman", "fn": "Blair Heiserman", "givenName": "Blair", "middleName": "", "affiliation": [ { "title": "National Institute of Standards and Technology", "@type": "org:Organization", "@id": "ror:05xpvk416" } ], "orcid": "", "@type": "foaf:Person" }, { "familyName": "Glemza", "fn": "Joshua Glemza", "givenName": "Joshua", "middleName": "", "affiliation": [ { "title": "National Aeronautics and Space Administration", "@type": "org:Organization" } ], "orcid": "", "@type": "foaf:Person" }, { "familyName": "Anderson", "fn": "Elyse Anderson", "givenName": "Elyse", "middleName": "", "affiliation": [ { "title": "National Aeronautics and Space Administration", "@type": "org:Organization" } ], "orcid": "", "@type": "foaf:Person" }, { "familyName": "Ramsey", "fn": "Paige Ramsey", "givenName": "Paige", "middleName": "", "affiliation": [ { "title": "Los Alamos National Laboratory", "@type": "org:Organization" } ], "orcid": "", "@type": "foaf:Person" } ], "releaseHistory": { "@id": "ark:/88434/mds2-2246.rel", "@type": [ "nrdr:ReleaseHistory" ], "hasRelease": [ { "version": "1.0.0", "issued": "2020-06-05 00:00:00", "@id": "ark:/88434/mds2-2246/pdr:v/1.0.0", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246/pdr:v/1.0.0", "description": "initial release" }, { "version": "1.0.1", "issued": "2020-06-05 00:00:00", "@id": "ark:/88434/mds2-2246/pdr:v/1.0.1", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246/pdr:v/1.0.1", "description": "metadata update" }, { "version": "1.0.2", "issued": "2020-06-05 00:00:00", "@id": "ark:/88434/mds2-2246/pdr:v/1.0.2", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246/pdr:v/1.0.2", "description": "metadata update" }, { "version": "1.0.3", "issued": "2020-06-05 00:00:00", "@id": "ark:/88434/mds2-2246/pdr:v/1.0.3", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246/pdr:v/1.0.3", "description": "metadata update" }, { "version": "1.0.4", "issued": "2020-06-05 00:00:00", "@id": "ark:/88434/mds2-2246/pdr:v/1.0.4", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246/pdr:v/1.0.4", "description": "metadata update" }, { "version": "1.0.5", "issued": "2020-06-05", "@id": "ark:/88434/mds2-2246/pdr:v/1.0.5", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246/pdr:v/1.0.5", "description": "metadata update" }, { "version": "1.0.6", "issued": "2020-06-05", "@id": "ark:/88434/mds2-2246/pdr:v/1.0.6", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246/pdr:v/1.0.6", "description": "metadata update" }, { "version": "1.0.7", "issued": "2020-06-05 00:00:00", "@id": "ark:/88434/mds2-2246/pdr:v/1.0.7", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246/pdr:v/1.0.7", "description": "metadata update" }, { "version": "1.0.8", "issued": "2020-06-05 00:00:00", "@id": "ark:/88434/mds2-2246/pdr:v/1.0.8", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246/pdr:v/1.0.8", "description": "metadata update" }, { "version": "1.0.9", "issued": "2020-06-05 00:00:00", "@id": "ark:/88434/mds2-2246/pdr:v/1.0.9", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246/pdr:v/1.0.9", "description": "metadata update" }, { "version": "1.0.10", "issued": "2020-06-05 00:00:00", "@id": "ark:/88434/mds2-2246/pdr:v/1.0.10", "location": "https://data.nist.gov/od/id/ark:/88434/mds2-2246/pdr:v/1.0.10", "description": "metadata update" } ] }, "status": "available", "annotated": "2025-05-14T12:45:56.170153" }