Audit Connected FAT32 and ExFAT Drives

FaibleNiveau 2Revue manuellemacos

Description

While FAT32 and exFAT offer cross-platform convenience, they introduce critical security gaps. These formats do not support encryption without third-party products (on any platform). Consequently, FAT32 and exFAT should be reserved strictly for temporary, non-sensitive data transfers, while any sustained use or sensitive data storage should utilize APFS (Encrypted).

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Terminal: diskutil list external | grep -E 'DOS_FAT_32|Microsoft Basic Data' Any FAT32 or ExFAT drives connected should meet your organization's existing device policies for external drives.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Any connected FAT32 or ExFAT volumes need to be audited to verify that they meet your organization's existing device policies for external drives.

Propriétés

Systèmes d'exploitation: macos-26
Étiquettes: macossystem-access
Référence: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 5.3.3 Audit Connected FAT32 and ExFAT Drives