Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-219 Rev. 1

Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP)

Date Published: July 2023

Supersedes: SP 800-219 (06/24/2022)


Mark Trapnell (NIST), Eric Trapnell (NIST), Murugiah Souppaya (NIST), Bob Gendler (NIST), Dan Brodjieski (NASA), Allen Golbig (Jamf), Karen Scarfone (Scarfone Cybersecurity), Blair Heiserman (NIST)



Apple; baseline; configuration management; endpoint device security; macOS; macOS Security Compliance Project (mSCP); operating system security; security compliance
Control Families

None selected


Download URL

Supplemental Material:
mSCP GitHub site
mSCP project documentation

Document History:
03/13/23: SP 800-219 Rev. 1 (Draft)
07/20/23: SP 800-219 Rev. 1 (Final)