+SYS.2.4.A12 Firmware Password and Boot Protection on Macs [User] (H)

SYS.2.4.A12 Firmware Password and Boot Protection on Macs [User] (H)

On older Macs, the request for a secure firmware password SHOULD be activated in command mode to prevent unauthorised booting from another boot drive. It SHOULD be checked whether a password should be requested for every startup process via full mode.

On Macs with a T2 security chip, a firmware password SHOULD be set via the Startup Security Utility. The option "Secure startup: Full security" SHOULD be activated. The option "Do not allow startup from external media" SHOULD be activated.

1. Übersicht

1.1 Referenzen

1.2 Identifizierte Anforderungen

1.3 Zugehörige Regulierungen

2. Identifizierte Anforderungen

Anforderungen

3. Zugehörige Regulierungen

Regulierungen

Verknüpfte Vorgänge

Verknüpfungen
blocks G 0.14 Interception of Information / Espionage
blocks G 0.16 Theft of Devices, Storage Media and Documents
blocks G 0.17 Loss of Devices, Storage Media and Documents
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.31 Incorrect Use or Administration of Devices and Systems
blocks G 0.46 Loss of Integrity of Sensitive Information