Sequoia macOS 15 Security Checklist

16 items · Security · Medium difficulty · 2 hours

Essential steps to validate and apply NIST Sequoia security baselines for macOS 15.0.

• Review checklist scope and target environment

  Confirm managed vs standalone applicability and target macOS Sequoia 15.0.

• Download Sequoia Guidance release files

  Obtain HTML, PDF, XLS, and SCAP files from the NIST macOS Security GitHub.

• Read known issues and warnings

  Note SCAP limitations, Smartcard impacts, and testing caveats before changes.

• Test settings in a non-production environment

  Validate impact and usability before rolling out to production.

• Backup systems before applying changes

  Create full backups or snapshots and verify recovery procedures.

• Validate SCAP content with the NIST SCAP Validation Tool

  Confirm SCAP files are intact and compatible with tooling.

• Map relevant security baselines to your environment

  Identify applicable controls (NIST SP 800-53, CIS, CMMC, DISA) for systems.

• Configure password and account policies

  Enforce complexity, expiration, lockout, and idle timeout settings.

• Enable FileVault full-disk encryption

  Turn on FileVault and escrow recovery keys per organizational policy.

• Enable System Integrity Protection and Secure Boot settings

  Ensure SIP and secure boot are enabled where supported.

• Configure macOS Firewall and network protections

  Enable app firewall, stealth mode, and restrict inbound services.

• Disable unnecessary services and applications

  Remove or disable unused daemons, login items, and network services.

• Install macOS updates and security patches

  Apply the latest Sequoia updates and security fixes before baseline changes.

• Enable auditing and centralized logging

  Configure system auditing and forward logs to your SIEM or log server.

• Apply configuration profiles via MDM or local tools

  Deploy recommended profiles through your MDM or local management where possible.

• Document changes and create a rollback plan

  Record applied settings, timestamps, and steps to revert changes if needed.

Printed from TickYouOff — the interactive version tracks your progress and can be shared with others.