Personal Computer Security Guidelines for macOS

Summary

Security best practices and guidelines for personally owned computers running the macOS operating system.

Body

Introduction

If you don’t have a UO-provided laptop and you're planning to work remotely using your personal device, you’ll need to take extra steps to make sure your work stays secure. Below are the UO's Personal Device Security Guidelines for both Mac and Windows computers.

Remember, even if you’re working remotely, we are here still here to support you. If you need help, contact your department or unit IT or the Technology Service Desk.

Information

Apply Updates

Prevent unauthorized access 

  • Install anti-virus software 
    • McAfee is provided free of charge to UO faculty, staff, and students 
    • Install the unmanaged version on your personal Mac 
    • Update the Signatures 
      • After installation, McAfee Endpoint Security for Mac automatically updates the content files to protect the Mac from the latest threats. By default, this update is scheduled at 4:45 pm local time every day. When the files are updated for the first time, it may take longer time to download the full content. The subsequent updates will be incremental. You can view the content files last update details in the Console page. 
    • Complete a full scan of your computer. We recommend plugging your computer in for the duration of the scan.
      • After you install the software to clean any infected files that might reside in the Mac, run an on-demand-scan to scan the local volumes. Configure the on-demand scan task to define:
        • The items to scan (files, folders, and drives)
        • Set frequency of scan (daily, weekly, monthly, or Immediately)
        • Define the action when malware is found (Delete or Clean)
  • Turn your firewall on
    • To turn on your firewall, go to System Preferences > Security (& Privacy) > Firewall > "Turn on Firewall" or "Start"
    • Detailed instructions

Use strong passwords 

Encrypt your hard drive

Before you encrypt your computer

  • Save your recovery key and computer password somewhere safe! If you lose them, you will lose access to your own computer!
  • Back up your computer files to a secure cloud service or external hard drive. (Note: External hard drives should also be encrypted, with the same caution to make sure you save the recovery key.)

How to encrypt

  • FileVault provides encryption for macOS. To enable it, select  Apple menu > System Preferences  > Security & Privacy > Click the FileVault tab > then Turn On FileVault. 
  • Once FileVault is active, enter your username and password to unlock the drive 
    • Make sure not to forget your log on information! 

Lock your screen

  • Lock your screen when you are not at your computer. Go to the Apple menu and choose  Lock Screen  or press  Command + Control + Q 
  • To automatically lock the screen when the screen saver turns on, click  Apple menu  >  System Preferences  >  Security & Privacy >  General  tab > select the option to require password after sleep or screen saver begins.

Details

Details

Article ID: 101092
Created
Thu 3/12/20 10:42 PM
Modified
Fri 9/8/23 1:20 PM

Related Articles

Related Articles (5)

This article provides a high-level overview of securing home networks with links to specific articles.
This article contains security recommendations for home Wi-Fi networks.
This article provides guidance on securing personal IoT devices
This article provides an overview of how to secure a personal mobile device.
Security best practices and guidelines for personally owned computers running the Windows operating system.

Related Services / Offerings

Related Services / Offerings (1)

Use this service to request an exception to standards published by the Information System Security Office (ISO).