Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-219

Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP)

Date Published: June 2022

Supersedes: SP 800-179 (12/05/2016)


Mark Trapnell (NIST), Eric Trapnell (NIST), Murugiah Souppaya (NIST), Bob Gendler (NIST), Karen Scarfone (Scarfone Cybersecurity)



Apple; baseline; configuration management; endpoint device security; macOS; macOS Security Compliance Project (mSCP); operating system security; security compliance
Control Families

None selected


Download URL

Supplemental Material:
mSCP GitHub site
mSCP project documentation

Document History:
02/17/22: SP 800-219 (Draft)
06/24/22: SP 800-219 (Final)