refactor[rules] CCEs added

2026-02-03 14:03:24 +00:00 · 2025-08-18 14:28:42 -04:00
parent 09be45dfdd
commit 8305331b37
321 changed files with 321 additions and 321 deletions
--- a/rules/audit/audit_acls_files_configure.yaml
+++ b/rules/audit/audit_acls_files_configure.yaml
@@ -15,7 +15,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95101-2
  cci:
    - CCI-000162
    - CCI-000163
--- a/rules/audit/audit_acls_folders_configure.yaml
+++ b/rules/audit/audit_acls_folders_configure.yaml
@@ -15,7 +15,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95102-0
  cci:
    - CCI-000162
    - CCI-000162
--- a/rules/audit/audit_alert_processing_fail.yaml
+++ b/rules/audit/audit_alert_processing_fail.yaml
@@ -8,7 +8,7 @@ fix: |
  This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented, but this finding cannot be considered fixed.
 references:
  cce:
-    - N/A
+    - CCE-95103-8
  cci:
    - N/A
  800-53r5:
--- a/rules/audit/audit_auditd_enabled.yaml
+++ b/rules/audit/audit_auditd_enabled.yaml
@@ -33,7 +33,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95104-6
  cci:
    - CCI-000130
    - CCI-000131
--- a/rules/audit/audit_configure_capacity_notify.yaml
+++ b/rules/audit/audit_configure_capacity_notify.yaml
@@ -15,7 +15,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95105-3
  cci:
    - CCI-000139
    - CCI-001855
--- a/rules/audit/audit_control_acls_configure.yaml
+++ b/rules/audit/audit_control_acls_configure.yaml
@@ -13,7 +13,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95106-1
  cci:
    - CCI-000162
    - CCI-000163
--- a/rules/audit/audit_control_group_configure.yaml
+++ b/rules/audit/audit_control_group_configure.yaml
@@ -13,7 +13,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95107-9
  cci:
    - CCI-000162
    - CCI-000163
--- a/rules/audit/audit_control_mode_configure.yaml
+++ b/rules/audit/audit_control_mode_configure.yaml
@@ -13,7 +13,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95108-7
  cci:
    - CCI-000162
    - CCI-000163
--- a/rules/audit/audit_control_owner_configure.yaml
+++ b/rules/audit/audit_control_owner_configure.yaml
@@ -13,7 +13,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95109-5
  cci:
    - CCI-000162
    - CCI-000163
--- a/rules/audit/audit_enforce_dual_auth.yaml
+++ b/rules/audit/audit_enforce_dual_auth.yaml
@@ -12,7 +12,7 @@ fix: |
  This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented, but this finding cannot be considered fixed.
 references:
  cce:
-    - N/A
+    - CCE-95110-3
  cci:
    - N/A
  800-53r5:
--- a/rules/audit/audit_failure_halt.yaml
+++ b/rules/audit/audit_failure_halt.yaml
@@ -15,7 +15,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95111-1
  cci:
    - CCI-000140
  800-53r5:
--- a/rules/audit/audit_files_group_configure.yaml
+++ b/rules/audit/audit_files_group_configure.yaml
@@ -17,7 +17,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95112-9
  cci:
    - CCI-000162
    - CCI-000163
--- a/rules/audit/audit_files_mode_configure.yaml
+++ b/rules/audit/audit_files_mode_configure.yaml
@@ -13,7 +13,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95113-7
  cci:
    - CCI-000162
    - CCI-000163
--- a/rules/audit/audit_files_owner_configure.yaml
+++ b/rules/audit/audit_files_owner_configure.yaml
@@ -17,7 +17,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95114-5
  cci:
    - CCI-000162
    - CCI-000163
--- a/rules/audit/audit_flags_aa_configure.yaml
+++ b/rules/audit/audit_flags_aa_configure.yaml
@@ -17,7 +17,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95115-2
  cci:
    - CCI-000172
    - CCI-001814
--- a/rules/audit/audit_flags_ad_configure.yaml
+++ b/rules/audit/audit_flags_ad_configure.yaml
@@ -21,7 +21,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95116-0
  cci:
    - CCI-000018
    - CCI-000172
--- a/rules/audit/audit_flags_ex_configure.yaml
+++ b/rules/audit/audit_flags_ex_configure.yaml
@@ -18,7 +18,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95117-8
  cci:
    - CCI-000172
    - CCI-001814
--- a/rules/audit/audit_flags_fd_configure.yaml
+++ b/rules/audit/audit_flags_fd_configure.yaml
@@ -19,7 +19,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95118-6
  cci:
    - CCI-000162
    - CCI-000163
--- a/rules/audit/audit_flags_fm_configure.yaml
+++ b/rules/audit/audit_flags_fm_configure.yaml
@@ -19,7 +19,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95119-4
  cci:
    - CCI-000162
    - CCI-000163
--- a/rules/audit/audit_flags_fm_failed_configure.yaml
+++ b/rules/audit/audit_flags_fm_failed_configure.yaml
@@ -19,7 +19,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95120-2
  cci:
    - N/A
  800-53r5:
--- a/rules/audit/audit_flags_fr_configure.yaml
+++ b/rules/audit/audit_flags_fr_configure.yaml
@@ -19,7 +19,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95121-0
  cci:
    - CCI-000172
    - CCI-001814
--- a/rules/audit/audit_flags_fw_configure.yaml
+++ b/rules/audit/audit_flags_fw_configure.yaml
@@ -19,7 +19,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95122-8
  cci:
    - CCI-000172
    - CCI-001814
--- a/rules/audit/audit_flags_lo_configure.yaml
+++ b/rules/audit/audit_flags_lo_configure.yaml
@@ -17,7 +17,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95123-6
  cci:
    - CCI-000067
    - CCI-000172
--- a/rules/audit/audit_folder_group_configure.yaml
+++ b/rules/audit/audit_folder_group_configure.yaml
@@ -17,7 +17,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95124-4
  cci:
    - CCI-000162
    - CCI-000163
--- a/rules/audit/audit_folder_owner_configure.yaml
+++ b/rules/audit/audit_folder_owner_configure.yaml
@@ -17,7 +17,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95125-1
  cci:
    - CCI-000162
    - CCI-000163
--- a/rules/audit/audit_folders_mode_configure.yaml
+++ b/rules/audit/audit_folders_mode_configure.yaml
@@ -15,7 +15,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95126-9
  cci:
    - CCI-000162
    - CCI-000163
--- a/rules/audit/audit_off_load_records.yaml
+++ b/rules/audit/audit_off_load_records.yaml
@@ -12,7 +12,7 @@ fix: |
  This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented, but this finding cannot be considered fixed.
 references:
  cce:
-    - N/A
+    - CCE-95127-7
  cci:
    - N/A
  800-53r5:
--- a/rules/audit/audit_record_reduction_report_generation.yaml
+++ b/rules/audit/audit_record_reduction_report_generation.yaml
@@ -12,7 +12,7 @@ fix: |
  The technology inherently meets this requirement. No fix is required.
 references:
  cce:
-    - N/A
+    - CCE-95128-5
  cci:
    - N/A
  800-53r5:
--- a/rules/audit/audit_records_processing.yaml
+++ b/rules/audit/audit_records_processing.yaml
@@ -10,7 +10,7 @@ fix: |
  This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented, but this finding cannot be considered fixed.
 references:
  cce:
-    - N/A
+    - CCE-95129-3
  cci:
    - N/A
  800-53r5:
--- a/rules/audit/audit_retention_configure.yaml
+++ b/rules/audit/audit_retention_configure.yaml
@@ -15,7 +15,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95130-1
  cci:
    - CCI-001849
  800-53r5:
--- a/rules/audit/audit_settings_failure_notify.yaml
+++ b/rules/audit/audit_settings_failure_notify.yaml
@@ -15,7 +15,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95131-9
  cci:
    - CCI-000140
    - CCI-001858
--- a/rules/auth/auth_pam_login_smartcard_enforce.yaml
+++ b/rules/auth/auth_pam_login_smartcard_enforce.yaml
@@ -37,7 +37,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95132-7
  cci:
    - CCI-000765
    - CCI-000766
--- a/rules/auth/auth_pam_su_smartcard_enforce.yaml
+++ b/rules/auth/auth_pam_su_smartcard_enforce.yaml
@@ -32,7 +32,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95133-5
  cci:
    - CCI-000765
    - CCI-000766
--- a/rules/auth/auth_pam_sudo_smartcard_enforce.yaml
+++ b/rules/auth/auth_pam_sudo_smartcard_enforce.yaml
@@ -31,7 +31,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95134-3
  cci:
    - CCI-000765
    - CCI-000766
--- a/rules/auth/auth_smartcard_allow.yaml
+++ b/rules/auth/auth_smartcard_allow.yaml
@@ -17,7 +17,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95135-0
  cci:
    - CCI-000187
    - CCI-000765
--- a/rules/auth/auth_smartcard_certificate_trust_enforce_high.yaml
+++ b/rules/auth/auth_smartcard_certificate_trust_enforce_high.yaml
@@ -19,7 +19,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95136-8
  cci:
    - N/A
  800-53r5:
--- a/rules/auth/auth_smartcard_certificate_trust_enforce_moderate.yaml
+++ b/rules/auth/auth_smartcard_certificate_trust_enforce_moderate.yaml
@@ -19,7 +19,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95137-6
  cci:
    - CCI-000186
    - CCI-001953
--- a/rules/auth/auth_smartcard_enforce.yaml
+++ b/rules/auth/auth_smartcard_enforce.yaml
@@ -21,7 +21,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95138-4
  cci:
    - CCI-000186
    - CCI-000765
--- a/rules/auth/auth_ssh_password_authentication_disable.yaml
+++ b/rules/auth/auth_ssh_password_authentication_disable.yaml
@@ -32,7 +32,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95139-2
  cci:
    - CCI-000186
    - CCI-000765
--- a/rules/icloud/icloud_addressbook_disable.yaml
+++ b/rules/icloud/icloud_addressbook_disable.yaml
@@ -15,7 +15,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95140-0
  cci:
    - CCI-000381
    - CCI-001774
--- a/rules/icloud/icloud_appleid_system_settings_disable.yaml
+++ b/rules/icloud/icloud_appleid_system_settings_disable.yaml
@@ -12,7 +12,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95141-8
  cci:
    - N/A
  800-53r5:
--- a/rules/icloud/icloud_bookmarks_disable.yaml
+++ b/rules/icloud/icloud_bookmarks_disable.yaml
@@ -15,7 +15,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95142-6
  cci:
    - CCI-000381
    - CCI-001774
--- a/rules/icloud/icloud_calendar_disable.yaml
+++ b/rules/icloud/icloud_calendar_disable.yaml
@@ -15,7 +15,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95143-4
  cci:
    - CCI-000381
    - CCI-001774
--- a/rules/icloud/icloud_drive_disable.yaml
+++ b/rules/icloud/icloud_drive_disable.yaml
@@ -15,7 +15,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95144-2
  cci:
    - CCI-000381
    - CCI-001774
--- a/rules/icloud/icloud_freeform_disable.yaml
+++ b/rules/icloud/icloud_freeform_disable.yaml
@@ -15,7 +15,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95145-9
  cci:
    - CCI-000381
    - CCI-001774
--- a/rules/icloud/icloud_game_center_disable.yaml
+++ b/rules/icloud/icloud_game_center_disable.yaml
@@ -14,7 +14,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95146-7
  cci:
    - CCI-000381
  800-53r5:
--- a/rules/icloud/icloud_keychain_disable.yaml
+++ b/rules/icloud/icloud_keychain_disable.yaml
@@ -15,7 +15,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95147-5
  cci:
    - CCI-001774
    - CCI-000381
--- a/rules/icloud/icloud_mail_disable.yaml
+++ b/rules/icloud/icloud_mail_disable.yaml
@@ -15,7 +15,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95148-3
  cci:
    - CCI-000381
    - CCI-001774
--- a/rules/icloud/icloud_notes_disable.yaml
+++ b/rules/icloud/icloud_notes_disable.yaml
@@ -15,7 +15,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95149-1
  cci:
    - CCI-000381
    - CCI-001774
--- a/rules/icloud/icloud_photos_disable.yaml
+++ b/rules/icloud/icloud_photos_disable.yaml
@@ -15,7 +15,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95150-9
  cci:
    - CCI-000381
    - CCI-001774
--- a/rules/icloud/icloud_private_relay_disable.yaml
+++ b/rules/icloud/icloud_private_relay_disable.yaml
@@ -15,7 +15,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95151-7
  cci:
    - CCI-000381
  800-53r5:
--- a/rules/icloud/icloud_reminders_disable.yaml
+++ b/rules/icloud/icloud_reminders_disable.yaml
@@ -15,7 +15,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95152-5
  cci:
    - CCI-000381
    - CCI-001774
--- a/rules/icloud/icloud_sync_disable.yaml
+++ b/rules/icloud/icloud_sync_disable.yaml
@@ -15,7 +15,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95153-3
  cci:
    - CCI-000381
  800-53r5:
--- a/rules/os/os_access_control_mobile_devices.yaml
+++ b/rules/os/os_access_control_mobile_devices.yaml
@@ -12,7 +12,7 @@ fix: |
  This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented, but this finding cannot be considered fixed.
 references:
  cce:
-    - N/A
+    - CCE-95154-1
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_account_modification_disable.yaml
+++ b/rules/os/os_account_modification_disable.yaml
@@ -22,7 +22,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95155-8
  cci:
    - CCI-000381
  800-53r5:
--- a/rules/os/os_airdrop_disable.yaml
+++ b/rules/os/os_airdrop_disable.yaml
@@ -14,7 +14,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95156-6
  cci:
    - CCI-000213
    - CCI-000381
--- a/rules/os/os_allow_info_passed.yaml
+++ b/rules/os/os_allow_info_passed.yaml
@@ -12,7 +12,7 @@ fix: |
  The technology inherently meets this requirement. No fix is required.
 references:
  cce:
-    - N/A
+    - CCE-95157-4
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_anti_virus_installed.yaml
+++ b/rules/os/os_anti_virus_installed.yaml
@@ -18,7 +18,7 @@ fix: |
  NOTE: These services cannot be unloaded or loaded while System Integrity Protection (SIP) is enabled.
 references:
  cce:
-    - N/A
+    - CCE-95158-2
  cci:
    - CCI-000366
  800-53r5:
--- a/rules/os/os_appleid_prompt_disable.yaml
+++ b/rules/os/os_appleid_prompt_disable.yaml
@@ -15,7 +15,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95159-0
  cci:
    - CCI-000381
  800-53r5:
--- a/rules/os/os_application_sandboxing.yaml
+++ b/rules/os/os_application_sandboxing.yaml
@@ -12,7 +12,7 @@ fix: |
  The technology inherently meets this requirement. No fix is required.
 references:
  cce:
-    - N/A
+    - CCE-95160-8
  800-53r5:
    - SC-39
  800-53r4:
--- a/rules/os/os_asl_log_files_owner_group_configure.yaml
+++ b/rules/os/os_asl_log_files_owner_group_configure.yaml
@@ -15,7 +15,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95161-6
  cci:
    - CCI-001312
    - CCI-001314
--- a/rules/os/os_asl_log_files_permissions_configure.yaml
+++ b/rules/os/os_asl_log_files_permissions_configure.yaml
@@ -13,7 +13,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95162-4
  cci:
    - CCI-001312
    - CCI-001314
--- a/rules/os/os_auth_peripherals.yaml
+++ b/rules/os/os_auth_peripherals.yaml
@@ -8,7 +8,7 @@ fix: |
  This requirement is a permanent finding and can be fixed by implementing a third party solution.
 references:
  cce:
-    - N/A
+    - CCE-95163-2
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_authenticated_root_enable.yaml
+++ b/rules/os/os_authenticated_root_enable.yaml
@@ -20,7 +20,7 @@ fix: |
  NOTE: To re-enable "Authenticated Root", boot the affected system into "Recovery" mode, launch "Terminal" from the "Utilities" menu, and run the command.
 references:
  cce:
-    - N/A
+    - CCE-95164-0
  cci:
    - CCI-000213
  800-53r5:
--- a/rules/os/os_blank_bluray_disable.yaml
+++ b/rules/os/os_blank_bluray_disable.yaml
@@ -23,7 +23,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95165-7
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_blank_cd_disable.yaml
+++ b/rules/os/os_blank_cd_disable.yaml
@@ -23,7 +23,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95166-5
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_blank_dvd_disable.yaml
+++ b/rules/os/os_blank_dvd_disable.yaml
@@ -23,7 +23,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95167-3
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_bluray_read_only_enforce.yaml
+++ b/rules/os/os_bluray_read_only_enforce.yaml
@@ -23,7 +23,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95168-1
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_bonjour_disable.yaml
+++ b/rules/os/os_bonjour_disable.yaml
@@ -13,7 +13,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95169-9
  cci:
    - CCI-000381
  800-53r5:
--- a/rules/os/os_burn_support_disable.yaml
+++ b/rules/os/os_burn_support_disable.yaml
@@ -15,7 +15,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95170-7
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_calendar_app_disable.yaml
+++ b/rules/os/os_calendar_app_disable.yaml
@@ -33,7 +33,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95171-5
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_camera_disable.yaml
+++ b/rules/os/os_camera_disable.yaml
@@ -25,7 +25,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95172-3
  cci:
    - CCI-000381
    - CCI-001774
--- a/rules/os/os_cd_read_only_enforce.yaml
+++ b/rules/os/os_cd_read_only_enforce.yaml
@@ -23,7 +23,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95173-1
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_certificate_authority_trust.yaml
+++ b/rules/os/os_certificate_authority_trust.yaml
@@ -10,7 +10,7 @@ fix: |
  Obtain the approved certificates from the appropriate authority and install them to the System Keychain.
 references:
  cce:
-    - N/A
+    - CCE-95174-9
  cci:
    - CCI-002470 
    - CCI-000185
--- a/rules/os/os_change_security_attributes.yaml
+++ b/rules/os/os_change_security_attributes.yaml
@@ -12,7 +12,7 @@ fix: |
  The technology inherently meets this requirement. No fix is required.
 references:
  cce:
-    - N/A
+    - CCE-95175-6
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_config_data_install_enforce.yaml
+++ b/rules/os/os_config_data_install_enforce.yaml
@@ -19,7 +19,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95176-4
  cci:
    - CCI-000366
  800-53r5:
--- a/rules/os/os_config_profile_ui_install_disable.yaml
+++ b/rules/os/os_config_profile_ui_install_disable.yaml
@@ -13,7 +13,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95177-2
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_continuous_monitoring.yaml
+++ b/rules/os/os_continuous_monitoring.yaml
@@ -8,7 +8,7 @@ fix: |
  This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented, but this finding cannot be considered fixed.
 references:
  cce:
-    - N/A
+    - CCE-95178-0
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_crypto_audit.yaml
+++ b/rules/os/os_crypto_audit.yaml
@@ -14,7 +14,7 @@ fix: |
  The technology inherently meets this requirement. No fix is required.
 references:
  cce:
-    - N/A
+    - CCE-95179-8
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_dictation_disable.yaml
+++ b/rules/os/os_dictation_disable.yaml
@@ -13,7 +13,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95180-6
  cci:
    - CCI-000381
  800-53r5:
--- a/rules/os/os_directory_services_configured.yaml
+++ b/rules/os/os_directory_services_configured.yaml
@@ -12,7 +12,7 @@ fix: |
  Integrate the system into an existing directory services infrastructure.
 references:
  cce:
-    - N/A
+    - CCE-95181-4
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_disk_image_disable.yaml
+++ b/rules/os/os_disk_image_disable.yaml
@@ -23,7 +23,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95182-2
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_dvdram_disable.yaml
+++ b/rules/os/os_dvdram_disable.yaml
@@ -23,7 +23,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95183-0
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_enforce_access_restrictions.yaml
+++ b/rules/os/os_enforce_access_restrictions.yaml
@@ -12,7 +12,7 @@ fix: |
  The technology inherently meets this requirement. No fix is required.
 references:
  cce:
-    - N/A
+    - CCE-95184-8
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_erase_content_and_settings_disable.yaml
+++ b/rules/os/os_erase_content_and_settings_disable.yaml
@@ -13,7 +13,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95185-5
  cci:
    - CCI-000366
    - CCI-000381
--- a/rules/os/os_error_message.yaml
+++ b/rules/os/os_error_message.yaml
@@ -8,7 +8,7 @@ fix: |
  The technology inherently meets this requirement. No fix is required.
 references:
  cce:
-    - N/A
+    - CCE-95186-3
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_ess_installed.yaml
+++ b/rules/os/os_ess_installed.yaml
@@ -11,7 +11,7 @@ fix: |
  Install the approved ESS solution onto the system.
 references:
  cce:
-    - N/A
+    - CCE-95187-1
  cci:
    - CCI-001233
  800-53r5:
--- a/rules/os/os_external_storage_access_defined.yaml
+++ b/rules/os/os_external_storage_access_defined.yaml
@@ -12,7 +12,7 @@ fix: |
  This is implemented by a Declarative Device Management.
 references:
  cce:
-    - N/A
+    - CCE-95188-9
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_facetime_app_disable.yaml
+++ b/rules/os/os_facetime_app_disable.yaml
@@ -30,7 +30,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95189-7
  cci:
    - CCI-000381
  800-53r5:
--- a/rules/os/os_fail_secure_state.yaml
+++ b/rules/os/os_fail_secure_state.yaml
@@ -14,7 +14,7 @@ fix: |
  The technology inherently meets this requirement. No fix is required.
 references:
  cce:
-    - N/A
+    - CCE-95190-5
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_filevault_authorized_users.yaml
+++ b/rules/os/os_filevault_authorized_users.yaml
@@ -15,7 +15,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95191-3
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_filevault_autologin_disable.yaml
+++ b/rules/os/os_filevault_autologin_disable.yaml
@@ -17,7 +17,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95192-1
  cci:
    - CCI-000213
    - CCI-000366
--- a/rules/os/os_firewall_default_deny_require.yaml
+++ b/rules/os/os_firewall_default_deny_require.yaml
@@ -21,7 +21,7 @@ fix: |
  NOTE: See the firewall supplemental which includes a script that has an example policy to implement this rule.
 references:
  cce:
-    - N/A
+    - CCE-95193-9
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_firmware_password_require.yaml
+++ b/rules/os/os_firmware_password_require.yaml
@@ -23,7 +23,7 @@ fix: |
  NOTE: See discussion on remediation and how to enable firmware password.
 references:
  cce:
-    - N/A
+    - CCE-95194-7
  cci:
    - CCI-000366
  800-53r5:
--- a/rules/os/os_gatekeeper_enable.yaml
+++ b/rules/os/os_gatekeeper_enable.yaml
@@ -17,7 +17,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95195-4
  cci:
    - CCI-001749
    - CCI-003992
--- a/rules/os/os_genmoji_disable.yaml
+++ b/rules/os/os_genmoji_disable.yaml
@@ -13,7 +13,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95196-2
  cci:
    - CCI-000381
    - CCI-001774
--- a/rules/os/os_grant_privs.yaml
+++ b/rules/os/os_grant_privs.yaml
@@ -12,7 +12,7 @@ fix: |
  The technology inherently meets this requirement. No fix is required.
 references:
  cce:
-    - N/A
+    - CCE-95197-0
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_guest_folder_removed.yaml
+++ b/rules/os/os_guest_folder_removed.yaml
@@ -13,7 +13,7 @@ fix: |
  ----
 references:
  cce:
-    - N/A
+    - CCE-95198-8
  cci:
    - N/A
  800-53r5:
--- a/rules/os/os_handoff_disable.yaml
+++ b/rules/os/os_handoff_disable.yaml
@@ -15,7 +15,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95199-6
  cci:
    - CCI-000213
    - CCI-000381
--- a/rules/os/os_hibernate_mode_destroyfvkeyonstandby_enable.yaml
+++ b/rules/os/os_hibernate_mode_destroyfvkeyonstandby_enable.yaml
@@ -13,7 +13,7 @@ fix: |
  This is implemented by a Configuration Profile.
 references:
  cce:
-    - N/A
+    - CCE-95200-2
  cci:
    - N/A
  800-53r5:
--- a/Show More
+++ b/Show More