Ensure Compliance in macOS 15 Sequoia: Addigy Benchmarks

Did you know that Addigy makes it easy to ensure your macOS 15 Sequoia devices are fully compliant with industry standards? As part of our device compliance features, we offer a set of pre-built benchmarks to easily test, monitor, and enforce compliance on your devices, ensuring they meet the standards set by the Center for Internet Security (CIS), the National Institute of Standards and Technology (NIST), and the Defense Information Systems Agency (DISA) Security Technology Implementation Guides (STIG).

We are excited to announce that Addigy already supports CIS Level 1 benchmarks for macOS 15 Sequoia, giving your organization a head start on ensuring a secure and compliant environment.

Which Benchmarks Should I Use?

Every organization has unique security requirements. Addigy offers compliance benchmarks from three trusted sources:

• CIS Level 1: A comprehensive set of over 80 rules that provides a strong security foundation for macOS 15 Sequoia. For those looking to get started quickly, the CIS Level 1 benchmark is already fully supported for Sequoia within Addigy.
• NIST: More stringent and complex than CIS, NIST baselines are ideal for organizations that require even higher levels of security controls.
• DISA STIG: Known for its rigorous security standards, DISA STIG benchmarks are particularly useful for government and defense contractors who must comply with federal regulations.

Custom Compliance Rules

Some organizations find the full set of rules too strict, so Addigy allows you to easily clone and customize the benchmark rules, tailoring them to your specific compliance needs. You can also create completely custom rules and remediation which can be integrated into the same policies as CIS, NIST, and DISA STIG benchmarks. While we recommend using the official rules to stay current with updates, the Addigy platform’s flexibility allows you to build the ruleset that works best for your organization.

For more information on creating custom compliance rules and benchmarks see our Knowledge Base article: How to Manage Device Compliance with Addigy

Where Do the Pre-built Benchmarks Come From?

Our pre-built benchmarks are sourced directly from CIS, NIST, and DISA STIG, leveraging trusted resources like the macOS Security Compliance Project. This ensures that every benchmark we provide is up-to-date with industry recommendations.

Pre-built Benchmark Benefits and Considerations

These rules, open-source and regularly tested, provide the best security options for macOS 15 Sequoia. Addigy continuously monitors any updates or changes to these benchmarks, ensuring that your devices remain compliant. By integrating these benchmarks into Sequoia, you gain robust security with minimal administrative intervention.

Should I Select “Monitor and Remediate” or “Monitor-Only”?

The Addigy platform offers two modes to manage compliance:

• Monitor and Remediate: Automatically enforce compliance by running scripts or installing profiles to ensure devices pass the benchmarks. This removes the need for manual administration and is preferred by most organizations.
• Monitor-Only: Run compliance tests without making automatic changes. This option allows organizations to monitor compliance levels and review detailed reports on which rules have passed or failed for each device.

Need More Assistance?

If you have any questions or would like help setting up your macOS 15 Sequoia compliance benchmarks, the Addigy Support team is here to assist. You can also start a free trial today to explore how Addigy makes compliance management easy.