NIST macOS Security Compliance Project
One branch per Apple release (tahoe and sequoia for macOS, ios_26 for iOS and iPadOS; a watchlist entry of kind "baseline" written "mscp: <branch>" follows others). Every rule with its check, fix, configuration-profile payload keys, severity and its SP 800-53 r5, 800-171 r3, CCI, STIG and CIS references; which baselines (800-53 High, DISA STIG, CIS Level 1 and 2, CMMC) list it. The branch's current commit is read from the GitHub API, so an unchanged branch costs one small request. Source · NIST; public domain in the United States (see the repository LICENSE).
Published by NIST, with DISA, NASA and the Los Alamos National Laboratory. One rule set per macOS release, each rule carrying its references to 800-53, 800-171, the STIG, CIS and CMMC, from which any of those baselines can be generated.
- Derives from
- NIST SP 800-53, NIST SP 800-171, CIS Benchmarks, DISA STIGs, CNSSI 1253
- At the publisher
- The same step, another body
- NIST SP 800-53B, CNSSI 1253, FedRAMP baselines, DISA Security Requirements Guides, NASA-SPEC-2600 (ASCS) — the other answers to the same job, on Learn