If you don't have an MDM solution, you can change the default values for FIPS and FedRAMP using the defaults command. The end user can potentially override values set through defaults, so we recommend using MDM when possible.