Comprehensive information protection on the MacBook A1534?

Question

macOS

Tell me how to ensure the protection of information, etc. on MacBook A1534?
Choice of antivirus (priority = free), anti-theft, etc.?

Answer 1

I Basic OS settings
1. Setting up an account for a user:
a. Go to "System Settings ..." and go to the "Users and Groups" section;
b. Create and set an administrator password;
c. Create a user account without administrator rights;
d. Disable the Guest user by unchecking “Allow guests to connect to shared folders;
e. Set login options:
2. Set up Safe & Secure settings:
a. Go to "System settings ...", go to the menu "Protection and security";
b. In the lower right corner, click the "Advanced ..." button and check all the checkboxes:
c. Press OK;
d. On the "General" tab, check the box "Require a password for sleep or screen saver" and set the value to "Immediately":
e. Set the checkbox "Allow downloading programs from:" to the 2nd value;
f. On the FireVault tab, click the Enable FileVault button:
g. On the "Firewall" tab, click "Enable Firewall":
3. On the "Privacy" tab, uncheck "Send diagnostic and usage data to Apple";
4. Set up "Find my Mac" (to control the location of your Mac mini in case of theft/unauthorized movement):
a. Download and install the “Find my Mac” program from the AppStore (you may need to enable location services in “System Preferences ...”, the “Protection and Security” menu) and specify this application;
b. Set up to work with a corporate Apple ID;
c. Check software operation via https://www.icloud.com;
5. Installing AdBlock (run under a user account!):
a. Open Safari;
b. In the top menu of the browser, go to the Safari tab, go to the menu item "Safari Extensions ...", find and download AdBlock (in principle, AdBlock is one of the first recommended applications);
6.
7. Show the user how to use the "Keychain Access" application to store passwords securely by the user;
8. Setting EFI password (on BIOS):
a. Reboot Mac mini and after the start melody, press the button on the keyboard "Option" and hold it down until the boot menu appears with icons of all available disks for boot;
e. Set the checkbox "Allow downloading programs from:" to the 2nd value;
f. On the FireVault tab, click the Enable FileVault button:
g. On the "Firewall" tab, click "Enable Firewall":
3. On the "Privacy" tab, uncheck "Send diagnostic and usage data to Apple";
4. "Find my Mac" setting (to control the location of Mac mini in case of theft/unauthorized movement):
a. Download and install the “Find my Mac” program from the AppStore (you may need to enable location services in “System Preferences ...”, the “Protection and Security” menu) and specify this application;
b. Set up to work with a corporate Apple ID;
c. Check software operation via https://www.icloud.com;
5. Installing AdBlock (run under a user account!):
a. Open Safari;
b. In the top menu of the browser, go to the Safari tab, go to the menu item "Safari Extensions ...", find and download AdBlock (in principle, AdBlock is one of the first recommended applications);
6.
7. Show the user how to use the "Keychain Access" application to store passwords securely by the user;
8. Setting EFI password (on BIOS):
a. Reboot Mac mini and after the start melody, press the button on the keyboard "Option" and hold it down until the boot menu appears with icons of all available disks for boot;
b. From the partitions offered for download, select the Recovery HD partition, find the "Utilities" item in the top menu bar, and in it - "Firmware Password Utility":
c. After launching the utility, a notification will appear on the screen stating that protection has not been installed and an invitation to set a new password. After you have done this, you can exit the utility and reboot into the working system:
d. Write down the password in a safe place, for example, in the KeePass program .
9. Prohibition of installing unverified software:
a. If the OS version is Sierra, no action is required;
b. If the OS version is lower than Sierra, then:
II Antivirus
Judging by the picture below, antivirus / Endpoint / DLP is not required if you are a simple user.
If you do not agree, here's your choice:
Accordingly, download the free version of the antivirus from the table above.

Answer 2

https://support.apple.com/en-us/HT204837 - FileVault will help you encrypt your drive.
https://www.avast.com/mac - Avast is quite suitable for basic protection.
In the settings, disable the installation of applications not from the App Store.
Bind the device to Apple ID - makes it possible to block and erase data remotely (if FileVault is enabled - having a guest account will allow you to boot the system without a user password).