Audit Security Keys Used With Apple Accounts

FaibleNiveau 2Revue manuellemacos

Description

Apple has introduced the capability of using security keys to protect Apple Accounts using two-factor authentication in macOS 13.2, in iOS 16.3, and in iPadOS 16.3. This feature along with the purchase of two hardware tokens (a backup device is required) protects against the compromise of Apple Accounts. This feature requires all devices using an enrolled Apple Account to meet the minimum OS standard. Users of Apple devices are supported across their devices by using the same Apple Account to support shared data in both iCloud and across devices. Compromising an Apple Account has become a very attractive target for attackers to gain unauthorized access to iCloud storage and user devices. Two-factor authentication reduces the risk.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Graphical Method: Perform the following steps to verify if Security Keys is set to your organization's requirements: 1. Open System Settings 2. Select Apple Account 3. Select Password & Security 4. Verify that Security Keys is set to your organization's requirements

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Graphical Method: Perform the following steps to set Security Keys is set to your organization's requirements: 1. Open System Settings 2. Select Apple Account 3. Select Password & Security 4. Select Add.. to add a security key, or Remove All Security Keys ro remove security keys, to meet your organization's requirements

Propriétés

Systèmes d'exploitation: macos-14
Étiquettes: cryptologgingmacossonoma
Référence: CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.1.1.4 Audit Security Keys Used With Apple Accounts