Ensure Computer Name Does Not Contain PII or Protected Organizational Information

MediumLevel 2Manual reviewmacos

Description

If the computer is used in an organization that assigns host names, it is a good idea to change the computer name to the host name. This is more of a best practice than a security measure. If the host name and the computer name are the same, computer support may be able to track problems down more easily. For organizations or for users that self-administer their own computers, it is important to not use sensitive or Personal Identifiable Information (PII) in computer names. The name of a computer that uses untrusted networks will be exposed at a minimum to the responsible network team of that network. For instance, having your name as your hostname can provide useful knowledge to an attacker monitoring the network to which you may be connected. Examples of possibly inappropriate content in computer names include: - User directory account names - Computer directory account names where...

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Graphical Method: Perform the following steps to verify the computer name: 1. Open System Settings 2. Select General 3. Select Sharing 4. Verify that Hostname is set to your organization's requirements

How it is fixed

Fix method: Guidance or infrastructure patch

Graphical Method: Perform the following steps to set the computer name: 1. Open System Settings 2. Select General 3. Select Sharing 4. Select Edit... 5. Set Hostname to your organization's requirements

Properties

Operating systems: macos-14
Tags: macossonoma
Reference: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.3.3.11 Ensure Computer Name Does Not Contain PII or Protected Organizational Information