Replaced system_settings_critical_update_install_enforce with system_settings_security_update_install

Removed system_settings_critical_update_install_enforce rule from both nlmapgov_base and nlmapgov_plus baselines and replaced with system_settings_security_update_install rule.

Author: aronvandenherik

baselines/nlmapgov_base.yaml

@@ -44,7 +44,6 @@ profile:
   - section: "systemsettings"
     rules:
       - system_settings_automatic_login_disable
-      - system_settings_critical_update_install_enforce
       - system_settings_download_software_update_enforce
       - system_settings_filevault_enforce
       - system_settings_find_my_disable
@@ -53,6 +52,7 @@ profile:
       - system_settings_guest_account_disable
       - system_settings_install_macos_updates_enforce
       - system_settings_loginwindow_loginwindowtext_enable
+      - system_settings_security_update_install
       - system_settings_softwareupdate_current
       - system_settings_time_server_configure
       - system_settings_time_server_enforce

baselines/nlmapgov_plus.yaml

@@ -73,7 +73,6 @@ profile:
   - section: "systemsettings"
     rules:
       - system_settings_automatic_login_disable
-      - system_settings_critical_update_install_enforce
       - system_settings_diagnostics_reports_disable
       - system_settings_download_software_update_enforce
       - system_settings_external_intelligence_disable
@@ -100,6 +99,7 @@ profile:
       - system_settings_screensaver_ask_for_password_delay_enforce
       - system_settings_screensaver_password_enforce
       - system_settings_screensaver_timeout_enforce
+      - system_settings_security_update_install
       - system_settings_smbd_disable
       - system_settings_softwareupdate_current
       - system_settings_ssh_disable

rules/system_settings/system_settings_critical_update_install_enforce.yaml

@@ -36,8 +36,6 @@ references:
   cmmc:
     - SI.L1-3.14.1
     - SI.L1-3.14.4
-  bio:
-    - 8.08.01
 macOS:
   - '26.0'
 tags:
@@ -52,8 +50,6 @@ tags:
   - cmmc_lvl2
   - cmmc_lvl1
   - cnssi-1253_moderate
-  - nlmapgov_base
-  - nlmapgov_plus
 mobileconfig: true
 mobileconfig_info:
   com.apple.SoftwareUpdate:

rules/system_settings/system_settings_security_update_install.yaml

@@ -33,6 +33,8 @@ references:
   cmmc:
     - SI.L1-3.14.1
     - SI.L1-3.14.4
+  bio:
+    - 8.08.01
 macOS:
   - '26.0'
 tags:
@@ -45,6 +47,8 @@ tags:
   - cmmc_lvl2
   - cmmc_lvl1
   - cnssi-1253_moderate
+  - nlmapgov_base
+  - nlmapgov_plus
 mobileconfig: false
 mobileconfig_info:
 ddm_info: