Basic Checks

  • A firewall should be activated
  • Disable automatic start of files downloaded by Safari
  • Disable Flash Plugin in Safari if installed
  • Do not use auto fill in Safari
  • Don’t automatically allow signed Apps to pass the firewall
  • Don’t show a list of user names in login window
  • Don’t show password hint at login window
  • File sharing should be disabled
  • Gatekeeper should be enabled
  • Guest user account should be deactivated
  • Install software updates automatically
  • Login/Default Keychain should be locked when entering sleep mode
  • Printer Sharing should be disabled
  • Remote login to your Mac should be disabled
  • Remote Management should be disabled
  • Screen Sharing should be disabled
  • Show all file extensions
  • Start screen saver after some time of inactivity
  • System Integrity Protection (ISP) should be on
  • Use Apple Servers for Software Updates
  • Use full-disk encryption on your startup disk
  • Warn about fraudulent websites in Safari
  • Automatic login should be disabled