---
id: os_burn_support_disable
title: Disable Burn Support
discussion: |
  Burn support _MUST_ be disabled.

  [IMPORTANT]
  ====
  Some organizations rely on the use of removable media for storing and sharing data. Information System Security Officers (ISSOs) may make the risk-based decision not to disable external hard drives to avoid losing this functionality, but they are advised to first fully weigh the potential risks posed to their organization.
  ====
references:
  nist:
    cce:
      macos_27:
        - CCE-XXXXX-X
      macos_26:
        - CCE-95170-7
      macos_15:
        - CCE-94170-8
      macos_14:
        - CCE-92770-7
    800-53r5:
      - MP-7
    800-171r3:
      - 03.08.07
  disa:
    cmmc:
      - MP.L2-3.8.7
      - MP.L2-3.8.8
platforms:
  macOS:
    '27.0': {}
    '26.0': {}
    '15.0': {}
    enforcement_info:
      check:
        shell: /usr/bin/profiles -P -o stdout | /usr/bin/grep -Ec '(BurnSupport = off;|ProhibitBurn = 1;)'
        result:
          integer: 2
    introduced: '10.7'
tags:
  - 800-171
  - cnssi-1253_low
  - cnssi-1253_high
  - cmmc_lvl2
  - cnssi-1253_moderate
mobileconfig_info:
  - PayloadType: com.apple.finder
    PayloadContent:
      - ProhibitBurn: true
  - PayloadType: com.apple.DiscRecording
    PayloadContent:
      - BurnSupport: 'off'
