Add system_settings_external_intelligence_sign_in_disable to nlmapgov_plus

Add `system_settings_external_intelligence_sign_in_disable` to `nlmapgov_plus` as part of DLP best practices in BIO 8.12.01 rule. Replaces previous addition of `system_settings_external_intelligence_disable`

Author: aronvandenherik

baselines/nlmapgov_plus.yaml

@@ -75,7 +75,7 @@ profile:
       - system_settings_automatic_login_disable
       - system_settings_diagnostics_reports_disable
       - system_settings_download_software_update_enforce
-      - system_settings_external_intelligence_disable
+      - system_settings_external_intelligence_sign_in_disable
       - system_settings_filevault_enforce
       - system_settings_find_my_disable
       - system_settings_firewall_enable

rules/system_settings/system_settings_external_intelligence_disable.yaml

@@ -44,8 +44,6 @@ references:
     - AC.L1-3.1.20
     - CM.L2-3.4.6
     - CM.L2-3.4.7
-  bio:
-    - 8.12.01
 macOS:
   - '26.0'
 tags:
@@ -64,7 +62,6 @@ tags:
   - cis_lvl2
   - cmmc_lvl1
   - cmmc_lvl2
-  - nlmapgov_plus
 severity: medium
 mobileconfig: true
 mobileconfig_info:

rules/system_settings/system_settings_external_intelligence_sign_in_disable.yaml

@@ -44,6 +44,8 @@ references:
     - AC.L1-3.1.20
     - CM.L2-3.4.6
     - CM.L2-3.4.7
+  bio:
+    - 8.12.01
 macOS:
   - '26.0'
 tags:
@@ -62,6 +64,7 @@ tags:
   - cis_lvl2
   - cmmc_lvl1
   - cmmc_lvl2
+  - nlmapgov_plus
 severity: medium
 mobileconfig: true
 mobileconfig_info: