Audit Connected FAT32 and ExFAT Drives

低レベル 2手動レビューmacos

説明

While FAT32 and exFAT offer cross-platform convenience, they introduce critical security gaps. These formats do not support encryption without third-party products (on any platform). Consequently, FAT32 and exFAT should be reserved strictly for temporary, non-sensitive data transfers, while any sustained use or sensitive data storage should utilize APFS (Encrypted).

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Terminal: diskutil list external | grep -E 'DOS_FAT_32|Microsoft Basic Data' Any FAT32 or ExFAT drives connected should meet your organization's existing device policies for external drives.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Any connected FAT32 or ExFAT volumes need to be audited to verify that they meet your organization's existing device policies for external drives.

プロパティ

オペレーティングシステム: macos-26
タグ: macossystem-access
参照: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 5.3.3 Audit Connected FAT32 and ExFAT Drives