<font size=3 face="Calibri"><b>IBM Tivoli Endpoint Manager for Security
and Compliance </b></font>
<br>
<br><font size=3 face="Calibri"><b>Security Configuration Management (SCM)</b></font>
<br>
<br><font size=3 face="Calibri">The Security and Compliance team at IBM
has <b><u>updated</u></b> the content within the DISA and USGCB Checklists
for Windows Operating Systems.<br>
</font>
<br><font size=3 face="Calibri"><b><u>1) Additional DISA Vulnerability
IDs have been added:</u></b></font>
<br>
<br><font size=3 face="Calibri">1. V-1077</font>
<br><font size=3 face="Calibri">2. V-1089</font>
<br><font size=3 face="Calibri">3. V-1095</font>
<br><font size=3 face="Calibri">4. V-1102</font>
<br><font size=3 face="Calibri">5. V-1103</font>
<br><font size=3 face="Calibri">6. V-1122</font>
<br><font size=3 face="Calibri">7. V-1126</font>
<br><font size=3 face="Calibri">8. V-1130</font>
<br><font size=3 face="Calibri">9. V-14250</font>
<br><font size=3 face="Calibri">10. V-14267</font>
<br><font size=3 face="Calibri">11. V-14268</font>
<br><font size=3 face="Calibri">12. V-14269</font>
<br><font size=3 face="Calibri">13. V-14270</font>
<br><font size=3 face="Calibri">14. V-15705</font>
<br><font size=3 face="Calibri">15. V-15706</font>
<br><font size=3 face="Calibri">16. V-15727</font>
<br><font size=3 face="Calibri">17. V-16021</font>
<br><font size=3 face="Calibri">18. V-16048</font>
<br><font size=3 face="Calibri">19. V-18010</font>
<br><font size=3 face="Calibri">20. V-3337</font>
<br><font size=3 face="Calibri">21. V-3481</font>
<br><font size=3 face="Calibri">22. V-3487<br>
</font>
<br>
<br><font size=3 face="Calibri"><b>*Affected Sites*<br>
</b></font><font size=2 face="sans-serif">DISA STIG Checklist for Windows
7: site version 9<br>
<br>
<b>2) </b></font><font size=3 face="Calibri"><b><u>The Relevance has been
updated to enhance the following checks:</u></b></font><font size=2 face="sans-serif"><br>
<br>
CCE-9067-0 Interactive logon: Smart
card removal behavior</font>
<br><font size=2 face="sans-serif">CCE-9308-8 Account
Lockout Duration </font>
<br><font size=2 face="sans-serif">CCE-8591-0 MSS:
(ScreenSaverGracePeriod) The time in seconds before the screen saver grace
period expires (0 recommended)</font>
<br><font size=2 face="sans-serif">CCE-8945-8 Recovery
Console: Allow Floppy Copy and Access to All Drives and All Folders</font>
<br><font size=2 face="sans-serif">CCE-8807-0 Recovery
Console: Allow Automatic Administrative Logon</font>
<br><font size=2 face="sans-serif">CCE-9342-7 MSS:
(AutoAdminLogon) Enable Automatic Logon (Not Recommended)</font>
<br><font size=2 face="sans-serif">CCE-8818-7 Interactive
logon: Require Domain Controller authentication to unlock workstation</font>
<br><font size=2 face="sans-serif">CCE-9440-9 Devices:
Restrict floppy access to locally logged-on user only</font>
<br><font size=2 face="sans-serif">CCE-9304-7 Devices:
Restrict CD-ROM access to locally logged-on user only</font>
<br><font size=2 face="sans-serif">CCE-9307-0 Interactive
logon: Prompt user to change password before expiration</font>
<br><font size=2 face="sans-serif">CCE-8487-1 Interactive
logon: Number of previous logons to cache (in case domain controller is
not available)<br>
<br>
</font><font size=3 face="Calibri"><b>*Affected Sites*</b></font><font size=2 face="sans-serif"><br>
USGCB Checklist for Internet Explorer 7: site version 4<br>
USGCB Checklist for Internet Explorer 8: sites version 11<br>
USGCB Checklist for Windows 7: site version 8<br>
USGCB Checklist for Windows 7 Firewall: site version 10</font>
<br><font size=2 face="sans-serif">USGCB Checklist for Windows 7 Energy:
site version 11</font>
<br><font size=2 face="sans-serif">USGCB Checklist for Windows Vista: site
version 3</font>
<br><font size=2 face="sans-serif">USGCB Checklist for Windows Vista Firewall:
site version 3</font>
<br><font size=2 face="sans-serif">USGCB Checklist for Windows Vista Energy:
site version 3</font>
<br><font size=2 face="sans-serif">USGCB Checklist for Windows XP: site
version 3</font>
<br><font size=2 face="sans-serif">USGCB Checklist for Windows XP Firewall:
site version 3<br>
</font>
<br><font size=3 face="Calibri">Please contact IBM Tivoli Endpoint Manager
Technical Support if you have any questions regarding this update.</font>
<br>
<br><font size=3 face="Calibri">We hope you find this latest release of
SCM content useful and effective. Thank you!</font>
<br>
<br><font size=3 face="Calibri"> -- The Tivoli Endpoint Manager for
Security and Compliance product team</font>