diff --git a/it-and-security/default.yml b/it-and-security/default.yml
index c76d9ebca2..0729cf779d 100644
--- a/it-and-security/default.yml
+++ b/it-and-security/default.yml
@@ -87,6 +87,7 @@ reports:
   - path: ./lib/macos/reports/detect-apns-certificate.yml
   - path: ./lib/macos/reports/collect-xprotect-reports.yml
 controls:
+  apple_require_hardware_attestation: true
   enable_disk_encryption: true
   macos_migration:
     enable: true