macOS APPL-26-002039
DISA STIG recommends
APPL-26-002039 CAT II
The macOS system must disable Siri Setup during Setup Assistant.
NIST SP 800-53: AC-20, CM-7, CM-7(1)
mSCP rule os_siri_prompt_disable · in 800-171, 800-53r5_high, 800-53r5_low, 800-53r5_moderate, DISA-STIG, all_rules, cisv8, cmmc_lvl1…
Configuration profile
com.apple.SetupAssistant.managed SkipSetupItems = ["Siri"]
Check
Verify the macOS system is configured to disable Siri Setup during Setup Assistant with the following command: /usr/bin/osascript -l JavaScript 2>/dev/null << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.SetupAssistant.managed')\ .objectForKey('SkipSetupItems').containsObject("Siri") EOS If the result is not "true", this is a finding.
Fix
Configure the macOS system to disable Siri Setup during Setup Assistant by installing the "com.apple.SetupAssistant.managed" configuration profile.
Our decision
Apply as published
No decision recorded: the recommendation stands. The owner signs in to change it.
All macOS decisions · The macOS baseline · The macOS test plan