Redeploying a Benchmark with Rule Updates

Compliance benchmarks rule configurations are based on the macOS Security Compliance Project (mSCP). Because of the dynamic nature of security and compliance, rules are added or modified to benchmark configurations periodically to remain aligned with the threat environment. Rules may also be modified to align with the latest macOS version as they are released. Compliance benchmarks indicates when a new rule is added or an existing rule is modified, enabling you to redeploy the benchmark with the updated rules.

In Jamf Pro, click Compliance in the sidebar.
If new or modified rules are available, an Update available label displays on the benchmark card.
Click the more info icon in the top-right corner of the benchmark you want to edit, and then click View.
On the Active rules card, an additional Update available label displays. Click the arrow.
If a rule has been added or modified by the mSCP, a label indicating the type of change is displayed.
Scroll the benchmark rules list to view new or modified rules. All new rules are selected by default, but you can manually deselect any rule. You can also edit ODVs for applicable rules. Customize the rules as necessary and click Save Draft.
Click Deploy.

The updated benchmark configuration is saved and applied to scoped devices.