The macOS system must disable Find My serviceID: oval:org.secpod.oval:def:99405 | Date: (C)2024-04-22 (M)2024-04-23 |
Class: COMPLIANCE | Family: macos |
The Find My service must be disabled. A Mobile Device Management (MDM) solution must be used to carry out remote locking and wiping instead of Apple's Find My service. Apple's Find My service uses a personal AppleID for authentication. Organizations should rely on MDM solutions, which have much more secure authentication requirements, to perform remote lock and remote wipe.