| CCE ID | Rule Title | Description |
| Enable audit Service | The audit service is an essential userspace component of
the auditing system, as it is responsible for writing audit records to
disk. |
|
| Shutdown System When Auditing Failures Occur | The macOS system must shut down by default upon audit failure unless availability is an overriding concern. |