Audit Notification Settings

LowLevel 1Manual reviewmacos

Description

Notification capabilities are designed to allow users to receive updates from applications that are not currently in use. These can be background applications or even notices from processes running on a computer that is not currently being actively used. Where the screen of a computer is visible to others other than the logged-in user due to shared working spaces or public spaces, consideration should be given to the exposure of sensitive data in notifications. Applications that use the system-wide application service may be individually managed, and applications that might expose confidential information to unauthorized users should not expose notifications except to the current user, especially on the locked screen when the computer may be unattended. Some work environments will handle sensitive or confidential information with applications that can provide notifications to anyone w...

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Graphical Method: Perform the following steps to verify that Notifications are set to your organization's requirements: 1. Open System Settings 2. Select Notifications 3. Verify that Show previews for each application is set to your organization's requirements Note: If the exposure of controlled information or data leakage is possible with application notifications, the acceptable notification level should be established through a risk analysis of what unauthorized leaks may occur.

How it is fixed

Fix method: Guidance or infrastructure patch

Graphical Method: Perform the following steps to set Notifications to your organization's requirements: 1. Open System Settings 2. Select Notifications 3. Select any applications that are not in compliance with your organization's requirements 4. Turn off or mute notifications that may expose information to unauthorized people that might be able to view screens of organizational computers.

Properties

Operating systems: macos-14
Tags: loggingmacossonoma
Reference: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.15.1 Audit Notification Settings