Checks to make sure that the System Integrity Protection feature is enabled.
Create or edit a configuration profile with the following information:
Create or edit the following script and configure it to run when the check fails:
Use the policy below to verify
SELECT 1 FROM sip_config WHERE config_flag = 'sip' AND enabled = 1;