security professional not accustomed to the Mac, establishing best practices for Mac OS