A Safe Mac is a Happy Mac. Learn to conquer your insecurities in this friendly self-help session. With a little mindfulness and courage, every Mac user can live happily ever after in an ever changing world where viruses and ransom ware threaten to invade your happy place.
This landing page contains links to resources to help users implement best practices to increase security in OS X and macOS.
Apple KB on System Integrity Protection
Understanding User Types in macOS
XProtect is basically the built in daemon that protects you from viruses and malware. This article gives more depth.
This Apple KB gives you clear steps on how to turn on this additional security feature. Avoid the fappening. Turn on 2 Factor today!
macOS Security Articles & KBs
The safest and most reliable place to download and install apps is via the Mac App Store. Apple reviews each app before it’s accepted by the store, and if there’s ever a problem with an app, Apple can quickly remove it from the store.
System Integrity Protection
System Integrity Protection is a security feature in OS X that protects the system shipped by Apple. By protecting access to system locations and restricting runtime attachment to system processes, this security policy guards against compromise — whether accidental or by malicious code.
OS X applies this security policy to every process running on the system, regardless of whether it’s running with administrative privileges or running unsandboxed.
Enterprise Mac Security (click here)* is an excellent text written by senior JAMF Engineer and Author Charles Edge, Jr. Charles also runs the site krypted.com which is another amazing resource for system administrators. Charles is one of many who were patient enough to answer a few questions while doing research for this presentation.
OpenDNS (click here) will help protect against viruses, malware, and ransom ware.
To get started, you’ll need to set up one or more of your devices to use OpenDNS’s DNS nameservers. For instructions on how to do this, choose your device type from one of the categories below.
Our nameservers are always: