BaselineWatch
Apply as published
Desk

macOS APPL-26-002039

DISA STIG APPL-26-002039 (CAT II): The macOS system must disable Siri Setup during Setup Assistant.

DISA STIG recommends

APPL-26-002039 CAT II

The macOS system must disable Siri Setup during Setup Assistant.

NIST SP 800-53: AC-20, CM-7, CM-7(1)

mSCP rule os_siri_prompt_disable · in 800-171, 800-53r5_high, 800-53r5_low, 800-53r5_moderate, DISA-STIG, all_rules, cisv8, cmmc_lvl1…

Configuration profile

com.apple.SetupAssistant.managed
  SkipSetupItems = ["Siri"]
Check

Verify the macOS system is configured to disable Siri Setup during Setup Assistant with the following command: /usr/bin/osascript -l JavaScript 2>/dev/null << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.SetupAssistant.managed')\ .objectForKey('SkipSetupItems').containsObject("Siri") EOS If the result is not "true", this is a finding.

Fix

Configure the macOS system to disable Siri Setup during Setup Assistant by installing the "com.apple.SetupAssistant.managed" configuration profile.

Our decision

Apply as published

No decision recorded: the recommendation stands. The owner signs in to change it.

All macOS decisions · The macOS baseline · The macOS test plan