Establish a macOS security baseline with mSCP and Microsoft Intune custom compliance

What changed

Microsoft Intune custom compliance provides the device compliance evaluation policy, and the National Institute of Standards and Technology’s (NIST) macOS Security Compliance Project (mSCP) provides macOS security rules and checks mapped to compliance requirements. Earlier this year we released Intune custom compliance for macOS devices.

Why it matters

The change can alter security posture, authentication, exposure or compatibility and therefore needs an owned validation path.

Known limitations

• Availability, prerequisites and rollout scope remain authoritative in the linked Microsoft documentation.

Now check

• Map the announced change to affected Intune workloads and supported platforms
• Pilot the exact profile, app or device action named by Microsoft
• Review policy, app, enrollment and support reports before rollout