Basic Checks

  • Disable automatic start of files downloaded by Safari
  • Disable Flash Plugin in Safari if installed
  • Gatekeeper should be enabled
  • Install software updates automatically
  • Lock the login keychain when your Mac sleeps
  • Printer Sharing should be disabled
  • Remote login to your Mac should be disabled
  • Remote Management should be disabled
  • Require name and password in the Mac login window
  • Review automatic firewall access for signed Mac software
  • Screen Sharing should be disabled
  • Show all file extensions
  • Start the screen saver after inactivity
  • System Integrity Protection (ISP) should be on
  • Turn off File Sharing on Mac when you do not need it
  • Turn off Mac Guest User access when you do not need it
  • Turn off password hints in the Mac login window
  • Turn off Safari AutoFill categories you do not need
  • Turn on Safari fraudulent website warnings on Mac
  • Turn on the built-in firewall on Mac
  • Use Apple Servers for Software Updates
  • Use full-disk encryption on your startup disk
  • Automatic login should be disabled