Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a checklist for securing MacOSX machines?

share|improve this question
I have a question. Is there some kind of rules about answering your own questions? Do people do this so that other people in the future will already have an answer? – Rell3oT Dec 2 '12 at 4:40
Thank you! Good concept. At first it seems weird but its a good idea – Rell3oT Dec 2 '12 at 14:28
up vote 2 down vote accepted

DISA STIGs are always good:

DISA is the Defense Information Systems Agency, the IT shop for the US Department of Defense. STIGs are the configuration guides that they publish for security networking and computing devices.

share|improve this answer
I've never seen the STIG format before. Funny that Safari won't open them and I had to use Opera. Do you know if STIGs are processed electronically somewhere/somehow? (as an online checklist?) – LamonteCristo Dec 3 '12 at 5:42
They provide some in PDF format and some are in XML format. The ones I linked to were in PDF, so I'd be surprised if you couldn't open them. The XML ones are admittedly hard to work with; there is no stylesheet that I know of that will pretty print a STIG. – mehaase Dec 3 '12 at 22:49
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.