BaselineWatch
Desk

os_fail_secure_state Configure System to Fail to a Known Safe State if System Initialization, Shutdown, or Abort Fails

NIST macOS Security Compliance Project Sequoia Guidance, Revision 4.0 (be5491f)
All changes in this version
first version loaded macOS

Title

Configure System to Fail to a Known Safe State if System Initialization, Shutdown, or Abort Fails

Control

The technology supports this requirement and cannot be configured to be out of compliance. The technology inherently meets this requirement.

Discussion

The information system _IS_ configured to fail to a known safe state in the event of a failed system initialization, shutdown, or abort.

Failure to a known safe state helps prevent systems from failing to a state that may cause loss of data or unauthorized access to system resources.

Apple File System (APFS) is the default file system for Mac computers using macOS 10.13 and all later versions. APFS includes native encryption, safe document saves, stable snapshots, and crash protection; these features ensure that the macOS fails to safe state.

link:https://developer.apple.com/videos/play/wwdc2017/715/[]

Related controls

sc-24

Fix

The technology inherently meets this requirement. No fix is required.