changes for cis

rules/os/os_config_data_install_enforce.yaml

@@ -35,7 +35,7 @@ references:
     - 03.14.02
   cis:
     benchmark:
-      - 1.6 (level 1)
+      - 1.5 (level 1)
     controls v8:
       - 7.3
       - 7.4

rules/os/os_mdm_require.yaml

@@ -43,7 +43,7 @@ references:
     - 03.04.02
   cis:
     benchmark:
-      - 1.8 (level 1)
+      - N/A
     controls v8:
       - 4.1
       - 5.1
@@ -59,8 +59,6 @@ tags:
   - 800-53r4_moderate
   - 800-53r4_high
   - 800-171
-  - cis_lvl1
-  - cis_lvl2
   - cisv8
   - cnssi-1253_low
   - cnssi-1253_high

rules/os/os_sleep_and_display_sleep_apple_silicon_enable.yaml

@@ -41,7 +41,7 @@ references:
     - N/A
   cis:
     benchmark:
-      - 2.10.1.1 (level 2)
+      - 2.10.1.2 (level 2)
     controls v8:
       - 4.1
 macOS:

rules/os/os_software_update_deferral.yaml

@@ -35,7 +35,7 @@ references:
     - N/A
   cis:
     benchmark:
-      - 1.7 (level 1)
+      - 1.6 (level 1)
     controls v8:
       - 7.3
       - 7.4

rules/os/system_settings_software_update_app_update_enforce.yaml

@@ -28,7 +28,7 @@ references:
     - N/A
   cis:
     benchmark:
-      - 1.5 (level 1)
+      - 1.4 (level 1)
     controls v8:
       - 7.3
       - 7.4

rules/supplemental/supplemental_cis_manual.yaml

@@ -8,15 +8,24 @@ discussion: |
   |Section
   |System Settings
 
+  |Recommendations
+  | 1.7 Ensure the System is Managed by a Mobile Device Management (MDM) Software
+  |===
+
+  [cols="15%h, 85%a"]
+  |===
+  |Section
+  |System Settings
+
   |Recommendations
   |2.1.1.1 Audit iCloud Keychain +
   2.1.1.2 Audit iCloud Drive +
-  2.1.1.4 Audit Security Keys Used With AppleIDs +
+  2.1.1.4 Audit Security Keys Used With Apple Accounts +
   2.1.1.5 Audit Freeform Sync to iCloud +
   2.1.1.6 Audit Find My Mac +
   2.1.2 Audit App Store Password Settings +
   2.3.3.11 Ensure Computer Name Does Not Contain PII or Protected Organizational Information +
-  2.4.1 Audit Menu Bar and Control Center Icons + 
+  2.4.3 Audit Menu Bar and Control Center Icons + 
   2.5.2.2 Ensure Listen for Siri is Disabled +
   2.6.1.3 Audit Location Services Access +
   2.6.2.1 Audit Full Disk Access for Applications +
@@ -24,14 +33,13 @@ discussion: |
   2.6.7 Audit Lockdown Mode +
   2.7.2 Audit iPhone Mirroring +
   2.8.1 Audit Universal Control Settings +
+  2.9.1 Ensure Help Apple Improve Search Is Disabled Draft +
   2.10.1.1 Ensure the OS Is Not Active When Resuming from Standby (Intel) +
   2.12.2 Audit Touch ID +
   2.14.1 Audit Game Center Settings +
   2.15.1 Audit Notification & Focus Settings +
   2.16.1 Audit Wallet & Apple Pay Settings +
   2.17.1 Audit Internet Accounts for Authorized Use +
-  6.1.1 Audit Finder Preferences +
-  6.5.1 Audit Passwords System Preference Setting +
   |===
 
   [cols="15%h, 85%a"]
@@ -68,6 +76,7 @@ discussion: |
   6.3.5 Audit Hide IP Address in Safari Setting +
   6.3.8 Audit Autofill +
   6.3.9 Audit Pop-up Windows +
+  6.5.1 Audit Passwords +
   |===
 check: |
 fix: |

rules/system_settings/system_settings_critical_update_install_enforce.yaml

@@ -28,7 +28,7 @@ references:
     - 03.14.01
   cis:
     benchmark:
-      - 1.6 (level 1)
+      - 1.5 (level 1)
     controls v8:
       - 7.3
       - 7.4

rules/system_settings/system_settings_improve_search_disable.yaml

@@ -38,7 +38,7 @@ references:
     - APPL-26-002024
   cis:
     benchmark:
-      - 2.9.1 (level 1)
+      - N/A
     controls v8:
       - 4.1
       - 4.8
@@ -63,8 +63,6 @@ tags:
   - cmmc_lvl1
   - stig
   - cnssi-1253_moderate
-  - cis_lvl1
-  - cis_lvl2
 severity: medium
 mobileconfig: true
 mobileconfig_info:

rules/system_settings/system_settings_install_macos_updates_enforce.yaml

@@ -28,7 +28,7 @@ references:
     - N/A
   cis:
     benchmark:
-      - 1.4 (level 1)
+      - 1.3 (level 1)
     controls v8:
       - 7.3
       - 7.4

rules/system_settings/system_settings_software_update_download_enforce.yaml

@@ -28,7 +28,7 @@ references:
     - N/A
   cis:
     benchmark:
-      - 1.3 (level 1)
+      - 1.2 (level 1)
     controls v8:
       - 7.3
       - 7.4