Date Published: June 22, 2026
Comments Due:
Email Comments to:
Author(s)
Eric Trapnell (NIST), Bob Gendler (NIST)
Announcement
This publication provides resources for assessing macOS desktop and laptop, iOS, and visionOS system security in an automated way, including up-to-date and practical recommendations (i.e., secure baselines and associated rules) that are available on the mSCP GitHub site. It also describes use cases for leveraging the mSCP content. Updates from the previous version of this publication highlight the mSCP’s next generation of improvements, including simpler OS version and rule management as well as an expanded audience.
The public comment period is open from June 22 through August 14, 2026. See the publication details for a copy of the draft and instructions for submitting comments.
NOTE: A call for patent claims is included on page ii of this draft. For additional information, see the Information Technology Laboratory (ITL) Patent Policy--Inclusion of Patents in ITL Publications.
The macOS Security Compliance Project (mSCP) provides resources that enable system administrators, security professionals, security policy authors, information security officers, and auditors to secure and assess macOS desktop and laptop, iOS, and visionOS system security in an automated way. This publication gives an overview of the practical, actionable recommendations (i.e., secure baselines and associated rules) that are available on the project’s GitHub site, which is continuously curated and updated to support each new release of macOS, iOS, and visionOS. This publication also describes use cases for leveraging the mSCP content. Updates from the previous version of this publication highlight the mSCP’s next generation of improvements, including simpler OS version and rule management as well as an expanded audience.
The macOS Security Compliance Project (mSCP) provides resources that enable system administrators, security professionals, security policy authors, information security officers, and auditors to secure and assess macOS desktop and laptop, iOS, and visionOS system security in an automated way. This...
See full abstract
The macOS Security Compliance Project (mSCP) provides resources that enable system administrators, security professionals, security policy authors, information security officers, and auditors to secure and assess macOS desktop and laptop, iOS, and visionOS system security in an automated way. This publication gives an overview of the practical, actionable recommendations (i.e., secure baselines and associated rules) that are available on the project’s GitHub site, which is continuously curated and updated to support each new release of macOS, iOS, and visionOS. This publication also describes use cases for leveraging the mSCP content. Updates from the previous version of this publication highlight the mSCP’s next generation of improvements, including simpler OS version and rule management as well as an expanded audience.
Hide full abstract
Keywords
Apple; baseline; configuration management; endpoint device security; iOS; macOS; macOS Security Compliance Project (mSCP); operating system security; security compliance; visionOS
Control Families
None selected
