Include system_settings_macos_updates_install_enforce

Included new `system_settings_macos_updates_install_enforce` rule in nlmapgov_base and nlmapgov_plus. This replaces previous rule `system_settings_macos_updates_install_enforce`.

Author: aronvandenherik

baselines/nlmapgov_base.yaml

@@ -49,8 +49,8 @@ profile:
       - system_settings_gatekeeper_identified_developers_allowed
       - system_settings_gatekeeper_override_disallow
       - system_settings_guest_account_disable
-      - system_settings_install_macos_updates_enforce
       - system_settings_loginwindow_loginwindowtext_enable
+      - system_settings_macos_updates_install_enforce
       - system_settings_security_update_install
       - system_settings_softwareupdate_current
       - system_settings_time_server_configure

baselines/nlmapgov_plus.yaml

@@ -85,9 +85,9 @@ profile:
       - system_settings_improve_assistive_voice_disable
       - system_settings_improve_search_disable
       - system_settings_improve_siri_dictation_disable
-      - system_settings_install_macos_updates_enforce
       - system_settings_internet_sharing_disable
       - system_settings_loginwindow_loginwindowtext_enable
+      - system_settings_macos_updates_install_enforce
       - system_settings_media_sharing_disabled
       - system_settings_password_hints_disable
       - system_settings_personalized_advertising_disable

rules/system_settings/system_settings_install_macos_updates_enforce.yaml

@@ -32,16 +32,12 @@ references:
     controls v8:
       - 7.3
       - 7.4
-  bio:
-    - 8.08.01
 macOS:
   - '26.0'
 tags:
   - cis_lvl1
   - cis_lvl2
   - cisv8
-  - nlmapgov_base
-  - nlmapgov_plus
 mobileconfig: true
 mobileconfig_info:
   com.apple.SoftwareUpdate:

rules/system_settings/system_settings_macos_updates_install_enforce.yaml

@@ -34,6 +34,8 @@ macOS:
   - '26.0'
 tags:
   - ddm
+  - nlmapgov_base
+  - nlmapgov_plus
 mobileconfig: false
 mobileconfig_info:
 ddm_info: