CyberSure Evidence Check for Mac - v1.1.0 (beta)
================================================

What it does
- Reads this Mac's security settings and compares them with the 15 CMMC Level 1
  (FAR 52.204-21) basic safeguarding requirements.
- Creates a report (HTML) on your Desktop that you can print or keep as evidence for
  your self-assessment.
- READ-ONLY: it does not change any setting, install anything, or delete anything.
- OFFLINE: it makes no internet connections and sends no data anywhere.
- No administrator password is needed.

How to run it (recommended)
1. Unzip the download (double-click the .zip file).
2. Open Terminal (Applications > Utilities > Terminal).
3. Type  bash  and a space, drag the file "CyberSure-EvidenceCheck-mac.sh" into the
   Terminal window, and press Return.
4. If macOS asks whether Terminal may access your Desktop, click Allow (that is where the
   report is saved). The report opens in your browser.

Or: double-click "Run-CyberSure-Evidence-Check.command". Because this free tool is not
signed by Apple, macOS may say it cannot be opened. In that case use the Terminal method
above, or go to System Settings > Privacy & Security and click "Open Anyway".

Run it on every Mac that handles Federal Contract Information (FCI). You can open the .sh
file in TextEdit to read exactly what it does.

Combining reports: the Mac report can be combined with Windows reports into one company
report using the CyberSure Company Report (included in the Windows download; it runs on
any Windows 10 or 11 computer).

Requirements: macOS 13 or later.

Beta: this version was tested against simulated macOS output, not yet on every macOS
version. If anything in the report looks wrong, tell us at cybersure.madethis.app/contact.

Verify your download (optional): in Terminal run
  shasum -a 256 CyberSure-EvidenceCheck-mac.sh
and compare with the SHA-256 published on the CyberSure download page.

Important
This tool helps you prepare and document your own self-assessment. It is not legal advice,
not a certification, and not an official CMMC assessment. Passing these checks does not by
itself mean a requirement is met; many Level 1 requirements are business practices the
report lists for you to confirm. CyberSure is a private company and is not affiliated with
or endorsed by the U.S. Army, the Department of Defense, or any government agency.

CyberSure - cybersure.madethis.app
