The macOS system must ensure Secure Boot level is set to "full".
Overview
Finding ID
Version
Rule ID
IA Controls
Severity
V-268568
APPL-15-005100
SV-268568r1034644_rule
Medium
Description
The Secure Boot security setting must be set to "full".
Full security is the default Secure Boot setting in macOS. During startup, when Secure Boot is set to full security, the Mac will verify the integrity of the operating system before allowing the operating system to boot.
NOTE: This will only return a proper result on a T2 or Apple Silicon Macs.
Satisfies: SRG-OS-000445-GPOS-00199, SRG-OS-000446-GPOS-00200, SRG-OS-000447-GPOS-00201