<div dir="ltr"><p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><b><span style="font-size:12pt;font-family:Arial,sans-serif">Product:</span></b></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif">BigFix Compliance</span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif"> </span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><b><span style="font-size:12pt;font-family:Arial,sans-serif">Title:</span></b></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif;color:black">Updated</span><span style="font-size:12pt;font-family:Arial,sans-serif;color:black"> Universal Checklist for MacOS (Beta) to support more recent
versions of CIS and DISA benchmarks.</span><span style="font-size:12pt;font-family:Arial,sans-serif"></span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif">Note: The Universal Checklist for MacOS remains
in Beta. This release updates the Beta content with the latest benchmark
coverage.</span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif">New to the Universal Checklist for MacOS? See
the original Beta announcement here: </span><a href="https://forum.bigfix.com/t/announcing-the-beta-release-universal-checklist-for-macos/54693" style="color:rgb(70,120,134)"><span style="font-size:12pt;font-family:Arial,sans-serif">Announcing the Beta
Release: Universal Checklist for MacOS</span></a><span style="font-size:12pt;font-family:Arial,sans-serif"></span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif"> </span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><b><span style="font-size:12pt;font-family:Arial,sans-serif">Published Sites:</span></b></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif">Universal Checklist for MacOS, site version 2</span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif">(The site version is provided for air-gap
customers.)</span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif"> </span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><b><span style="font-size:12pt;font-family:Arial,sans-serif">Details: Universal Checklist for MacOS (Beta)</span></b></p>
<p class="gmail-MsoListParagraphCxSpFirst" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Total
Fixlets: 208</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Total
New Fixlets: 0</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Total
Updated Fixlets: 11</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Total
Deleted Fixlets: 1</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Fixlets
with Remediation: 68</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Parameterized
Fixlets: 21</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Benchmark
Sources: CIS and DISA STIGs</span></p>
<p class="gmail-MsoListParagraphCxSpLast" style="line-height:normal;margin:0in 0in 8pt 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Applies
To: MacOS 14, MacOS 15, & MacOS 26</span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif">ADDED</span></p>
<p class="gmail-MsoListParagraph" style="line-height:normal;margin:0in 0in 8pt 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">NONE.</span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif">REMOVED</span></p>
<p class="gmail-MsoListParagraph" style="text-align:justify;line-height:normal;margin:0in 0in 8pt 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span style="font-size:12pt;font-family:Arial,sans-serif">The MacOS system must
disable root login.</span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif">UPDATED</span></p>
<p class="gmail-MsoListParagraphCxSpFirst" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Ensure
Sleep and Display Settings are configured</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Ensure
Screen Saver Hot Corners are configured</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Audit
Record Access</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Ensure
No World Writable Files in System Folder</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Ensure
No World Writable Files in Library Folder</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Ensure
the root Account Is Disabled</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Ensure
Apple-Provided Software Updates are configured</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Audit
AutoFill Settings</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">The
MacOS system must disable Siri and Dictation</span></p>
<p class="gmail-MsoListParagraphCxSpMiddle" style="line-height:normal;margin:0in 0in 0in 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Disable
Apple Intelligence during Setup Assistant</span></p>
<p class="gmail-MsoListParagraphCxSpLast" style="line-height:normal;margin:0in 0in 8pt 0.5in;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Symbol">·<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span style="font-size:12pt;font-family:Arial,sans-serif">Ensure
Improve Siri & Dictation Is Disabled</span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif"> </span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><b><span style="font-size:12pt;font-family:Arial,sans-serif">Actions to take:</span></b></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif">To subscribe to the above site, you can use the
License Overview Dashboard to enable and gather the site. Note that you must be
entitled to the BigFix Compliance product, and you must be using BigFix version
10 and later.</span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif">If you use custom sites, update your custom
sites accordingly to use the latest content. You can synchronize your content
by using the Synchronize Custom Checks wizard. For more information, see </span><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html" style="color:rgb(70,120,134)"><span style="font-size:12pt;font-family:Arial,sans-serif">Using the Synchronize
Custom Checks wizard</span></a><span style="font-size:12pt;font-family:Arial,sans-serif">.</span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif"> </span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><b><span style="font-size:12pt;font-family:Arial,sans-serif">More information:</span></b></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif">To know more about the BigFix Compliance SCM
checklists, please see the following resources:</span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif">BigFix Forum: </span><a href="https://forum.bigfix.com/c/release-announcements/compliance/63" style="color:rgb(70,120,134)"><span style="font-size:12pt;font-family:Arial,sans-serif">https://forum.bigfix.com/c/release-announcements/compliance</span></a><span style="font-size:12pt;font-family:Arial,sans-serif"></span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif">BigFix Compliance SCM Checklists: </span><a href="https://forum.bigfix.com/t/universal-compliance-checklist/54703" style="color:rgb(70,120,134)"><span style="font-size:12pt;font-family:Arial,sans-serif">Universal Compliance
Checklist</span></a><span style="font-size:12pt;font-family:Arial,sans-serif"></span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif"> </span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif">We hope you find this latest release of SCM
content useful and effective. Thank you.</span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif"> </span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in 0in 8pt;font-size:11pt;font-family:Aptos,sans-serif"><span style="font-size:12pt;font-family:Arial,sans-serif">– The BigFix Compliance team</span></p></div>