macOS
TMA-MACOS14-2.15.1
Audit Notification Settings
説明
Notification capabilities are designed to allow users to receive updates from applications that are not currently in use. These can be background applications or even notices from processes running on a computer that is not currently being actively used. Where the screen of a computer is visible to others other than the logged-in user due to shared working spaces or public spaces, consideration should be given to the exposure of sensitive data in notifications. Applications that use the system-wide application service may be individually managed, and applications that might expose confidential information to unauthorized users should not expose notifications except to the current user, especially on the locked screen when the computer may be unattended. Some work environments will handle sensitive or confidential information with applications that can provide notifications to anyone w...
チェック方法
監査方法: 手動レビュー
Graphical Method: Perform the following steps to verify that Notifications are set to your organization's requirements: 1. Open System Settings 2. Select Notifications 3. Verify that Show previews for each application is set to your organization's requirements Note: If the exposure of controlled information or data leakage is possible with application notifications, the acceptable notification level should be established through a risk analysis of what unauthorized leaks may occur.
修正方法
修正方法: ガイダンスまたは IaC パッチ
Graphical Method: Perform the following steps to set Notifications to your organization's requirements: 1. Open System Settings 2. Select Notifications 3. Select any applications that are not in compliance with your organization's requirements 4. Turn off or mute notifications that may expose information to unauthorized people that might be able to view screens of organizational computers.
プロパティ
- オペレーティングシステム
- macos-14
- タグ
- loggingmacossonoma
- 参照
- CIS Apple macOS 14.0 Sonoma Benchmark v3.1.0 - 2.15.1 Audit Notification Settings