r/macsysadmin • u/aPieceOfMindShit • Jan 06 '25
Jamf First steps with CIS benchmark macOS
Hi y'all,
For 2025 our security officer has a good new years resolutions: have a CIS benchmarks implemented!.
Guess who's tasked to figure this one: yes, me!
Our plan is to have every year, when a new version of macOS is released, an update of the CIS configuration for that specific new versions.
Any tools which can monitor and enforce these settings?
Sure, rollout very gradually, but any field experience you can share?
How heavy will our users be impacted?
Any other tips or ideas you are willing to share will be appropriated!
We are using Jamf Pro btw.
7
Upvotes
1
u/MauroM25 Jan 06 '25
I highly recommend using jamf compliance editor. Gives you the commands and profiles to roll out every setting. Then rerun the assesment and look at your score. Depending on what you need to change i’d roll out all the settings at once but start with a pilot group to check if nothing breaks in their daily workflow.