The macOS system must disable Personalized Advertising.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-268526APPL-15-002200SV-268526r1034518_ruleCCI-000381medium
Description
Ad tracking and targeted ads must be disabled. The information system must be configured to provide only essential capabilities. Disabling ad tracking ensures that applications and advertisers are unable to track users' interests and deliver targeted advertisements.
STIGDate
Apple macOS 15 (Sequoia) Security Technical Implementation Guide2025-05-05

Related Frameworks

3 paths across 3 frameworks
NIST 800-531 mapping
CM-7
1.00
  • DISA · 1 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1711 mapping
3.4.6
1.00
  • DISA · 1 · disa_xccdf · related
  • DISA · 2025-01-23 · disa_cci_list · equivalent
  • NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-000381
1.00
  • DISA · 1 · disa_xccdf · related

Details

Check Text (C-268526r1034518_chk)

Verify the macOS system is configured to disable Personalized Advertising with the following command: /usr/bin/osascript -l JavaScript << EOS $.NSUserDefaults.alloc.initWithSuiteName('com.apple.applicationaccess')\ .objectForKey('allowApplePersonalizedAdvertising').js EOS If the result is not "false", this is a finding.

Fix Text (F-72457r1034517_fix)

Configure the macOS system to disable Personalized Advertising by installing the "com.apple.applicationaccess" configuration profile.