<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:Wingdings;
panose-1:5 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin-top:0in;
margin-right:0in;
margin-bottom:8.0pt;
margin-left:0in;
line-height:106%;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-ligatures:standardcontextual;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:838277335;
mso-list-template-ids:625126232;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l0:level3
{mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1
{mso-list-id:1200781494;
mso-list-template-ids:2106391742;}
@list l1:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l1:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l1:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l1:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2
{mso-list-id:1811094775;
mso-list-template-ids:-390319254;}
@list l2:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7 ;
mso-level-tab-stop:.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l2:level2
{mso-level-number-format:bullet;
mso-level-text:o;
mso-level-tab-stop:1.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:"Courier New";
mso-bidi-font-family:"Times New Roman";}
@list l2:level3
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:1.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level4
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:2.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level5
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:2.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level6
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:3.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level7
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:3.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level8
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:4.0in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
@list l2:level9
{mso-level-number-format:bullet;
mso-level-text:\F0A7 ;
mso-level-tab-stop:4.5in;
mso-level-number-position:left;
text-indent:-.25in;
mso-ansi-font-size:10.0pt;
font-family:Wingdings;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style>
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal" style="mso-margin-bottom-alt:auto;line-height:normal;background:white">
<b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none">Product:</span></b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none"><br>
BigFix Compliance PCI Add-on<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;background:white">
<b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none">Title:</span></b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none"><br>
PCI DSS Checklist for Windows 11 (PCI v4.0)<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;background:white">
<b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none">Category:</span></b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none"><br>
PCI DSS Checklist<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;background:white">
<b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none">Security Benchmark:</span></b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none"><br>
Payment Card Industry Data Security Standard v4.0<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;background:white">
<b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none">Published Sites:</span></b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none"><br>
PCI DSS Checklist for Windows 11 (PCI v4.0), site version 1.<br>
PCI DSS Reporting, site version 18.<br>
(The site version is provided for air-gap customers.)<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;background:white">
<b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none">Details:</span></b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none"><o:p></o:p></span></p>
<ul type="disc">
<li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level1 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">The BigFix Compliance PCI Add-on team is pleased to announce the availability of the new checklist for BigFix Compliance PCI Add-on: PCI DSS Checklist for Windows 11 (PCI v4.0).<o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level1 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">This new checklist is based on the guidance provided by the Payment Card Industry Data Security Standard (PCI DSS) v4.0 and contains security configuration checks that evaluate the security
settings of your Windows 11 endpoints according to the PCI DSS standard.<o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level1 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">As with most of the existing PCI DSS contents in the BigFix Compliance PCI Add-on library, this checklist includes checks with:<o:p></o:p></span></li><ul type="circle">
<li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level2 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">Corresponding analyses properties to report actual values.<o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level2 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">Standardized titles, descriptions, and measured values for enhanced readability and consistency.<o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level2 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">The ability to ensure correctness of compliance data.<o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level2 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">Some of the checks allow you to use the parameterized setting to enable customization for compliance evaluation.<o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level2 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">Most of the checks also support remediation that allows BigFix operators to efficiently remediate a non-compliance issue with a single action.<o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level2 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">List of checks whose rules are not automatically assessed:<o:p></o:p></span></li><ol start="1" type="1">
<li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level3 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">ID: 160580 Title: Ensure PCI DSS Requirement 3 requirements are being operated (Rule not automatically assessed).<o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level3 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">ID: 160581 Title: Ensure PCI DSS Requirement 9 requirements are being operated (Rule not automatically assessed).<o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level3 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">ID: 160582 Title: Ensure PCI DSS Requirement 11 requirements are being operated (Rule not automatically assessed).<o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level3 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">ID: 160583 Title: Ensure PCI DSS Requirement 12 requirements are being operated (Rule not automatically assessed).<o:p></o:p></span></li></ol>
</ul>
<li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level1 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">The following PCI DSS Policies are refreshed with the latest content from the PCI DSS Checklist for Windows 11 (PCI v4.0) site:<o:p></o:p></span></li><ul type="circle">
<li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level2 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">PCI DSS Checklists<o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level2 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">PCI DSS Milestones View<o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l0 level2 lfo1;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">PCI DSS Requirements View<o:p></o:p></span></li></ul>
</ul>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;background:white">
<b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none">Actions to take:</span></b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none"><o:p></o:p></span></p>
<ul type="disc">
<li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l1 level1 lfo2;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">Use the License Overview dashboard from the BES Support site to enable and gather the said site. Note that you must be entitled to the new content, and you are using BigFix version 9.5
and later.<o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l1 level1 lfo2;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">Create a custom site for the PCI DSS Checklist for Windows 11 (PCI v4.0) site to display the Windows 11 results in the PCI DSS Policy Reports.<o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l1 level1 lfo2;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">If you were involved in the Beta / Early Access Program for BigFix Compliance PCI Add-on, unsubscribe from the beta sites to avoid any conflicting issues with the production sites. If you
do not unsubscribe from the beta sites, the content in the production sites will fail.<o:p></o:p></span></li></ul>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;background:white">
<b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none">More information:</span></b><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none"><br>
To know more about the BigFix Compliance PCI DSS checklists, please see the following resources:<o:p></o:p></span></p>
<ul type="disc">
<li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l2 level1 lfo3;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">BigFix Forum:<br>
</span><span style="color:black"><a href="https://forum.bigfix.com/c/release-announcements/pci-add-on"><span style="font-size:10.5pt;font-family:Helvetica;color:#0088CC;mso-ligatures:none">https://forum.bigfix.com/c/release-announcements/pci-add-on</span></a></span><span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none"><o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l2 level1 lfo3;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">BigFix Compliance SCM Checklists:<br>
</span><span style="color:black"><a href="https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists"><span style="font-size:10.5pt;font-family:Helvetica;color:#0088CC;background:white">https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists</span></a></span><span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none"><o:p></o:p></span></li><li class="MsoNormal" style="color:#222222;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;mso-list:l2 level1 lfo3;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none">BigFix PCI Add-on User’s Guide:<br>
</span><span style="color:black"><a href="https://help.hcltechsw.com/bigfix/10.0/compliance/Compliance/pci.html"><span style="font-size:10.5pt;font-family:Helvetica;color:#0088CC;background:white">https://help.hcltechsw.com/bigfix/10.0/compliance/Compliance/pci.html</span></a></span><span style="font-size:10.5pt;font-family:Helvetica;mso-ligatures:none"><o:p></o:p></span></li></ul>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;background:white">
<span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none">We hope you find this latest release of SCM content useful and effective. Thank you!<o:p></o:p></span></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:normal;background:white">
<i><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none">– The BigFix Compliance PCI Add-on team</span></i><span style="font-size:10.5pt;font-family:Helvetica;color:#222222;mso-ligatures:none">.<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>