[BESAdmin-Announcements] BigFix Compliance: Updated Universal Checklist for MacOS (Beta), published 2026-09-09

[Announcements for BES Administrators]

*Product:*

BigFix Compliance



*Title:*

Updated Universal Checklist for MacOS (Beta) to support more recent
versions of CIS and DISA benchmarks.

Note: The Universal Checklist for MacOS remains in Beta. This release
updates the Beta content with the latest benchmark coverage.

New to the Universal Checklist for MacOS? See the original Beta
announcement here: Announcing the Beta Release: Universal Checklist for
MacOS
<https://forum.bigfix.com/t/announcing-the-beta-release-universal-checklist-for-macos/54693>



*Published Sites:*

Universal Checklist for MacOS, site version 2

(The site version is provided for air-gap customers.)



*Details: Universal Checklist for MacOS (Beta)*

·       Total Fixlets: 208

·       Total New Fixlets: 0

·       Total Updated Fixlets: 11

·       Total Deleted Fixlets: 1

·       Fixlets with Remediation: 68

·       Parameterized Fixlets: 21

·       Benchmark Sources: CIS and DISA STIGs

·       Applies To: MacOS 14, MacOS 15, & MacOS 26

ADDED

·       NONE.

REMOVED

·       The MacOS system must disable root login.

UPDATED

·       Ensure Sleep and Display Settings are configured

·       Ensure Screen Saver Hot Corners are configured

·       Audit Record Access

·       Ensure No World Writable Files in System Folder

·       Ensure No World Writable Files in Library Folder

·       Ensure the root Account Is Disabled

·       Ensure Apple-Provided Software Updates are configured

·       Audit AutoFill Settings

·       The MacOS system must disable Siri and Dictation

·       Disable Apple Intelligence during Setup Assistant

·       Ensure Improve Siri & Dictation Is Disabled



*Actions to take:*

To subscribe to the above site, you can use the License Overview Dashboard
to enable and gather the site. Note that you must be entitled to the BigFix
Compliance product, and you must be using BigFix version 10 and later.

If you use custom sites, update your custom sites accordingly to use the
latest content. You can synchronize your content by using the Synchronize
Custom Checks wizard. For more information, see Using the Synchronize
Custom Checks wizard
<https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html>
.



*More information:*

To know more about the BigFix Compliance SCM checklists, please see the
following resources:

BigFix Forum: https://forum.bigfix.com/c/release-announcements/compliance
<https://forum.bigfix.com/c/release-announcements/compliance/63>

BigFix Compliance SCM Checklists: Universal Compliance Checklist
<https://forum.bigfix.com/t/universal-compliance-checklist/54703>



We hope you find this latest release of SCM content useful and effective.
Thank you.



– The BigFix Compliance team
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://bigmail.bigfix.com/pipermail/besadmin-announcements/attachments/20260916/31896f99/attachment.html>