<div dir="ltr"><p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">Product:<br>
</span></b><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif"> BigFix Compliance</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">Title:<br>
</span></b><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif"> </span><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif;color:black">Updated DISA STIG Checklist for Windows
2022.</span><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">Security Benchmark:<br>
</span></b><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif"> </span><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif;color:black">Microsoft Windows Server 2022 STIG SCAP
Benchmark, V2R4.</span><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif"></span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">Published Sites:<br>
</span></b><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif"> </span><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif;color:black">DISA STIG Checklist for Windows 2022</span><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">, site version </span><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif;color:black">12.<br>
</span><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif"> (The site version is provided for air-gap
customers.)</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif;color:black"><br>
</span><b><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">Details:</span></b></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Both analysis and
remediation checks are included</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Some of the checks allow
you to use the parameterized setting to enable customization for compliance
evaluation. Note that parameterization and remediation actions require the
creation of a custom site.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">‘Deploy and Run’ task has
been implemented to validate compliance for the following rules:</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="color:black"><span id="gmail-2125256091"><span style="font-size:10.5pt;font-family:"Arial Unicode MS";color:rgb(34,34,34)">● Windows Server
2022 must not allow anonymous SID/Name translation.</span></span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="color:black"><span id="gmail--151753162"><span style="font-size:10.5pt;font-family:"Arial Unicode MS";color:rgb(34,34,34)">● Windows Server
2022 must have the built-in Windows password complexity policy enabled.</span></span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="color:black"><span id="gmail-1702427924"><span style="font-size:10.5pt;font-family:"Arial Unicode MS";color:rgb(34,34,34)">● Windows Server
2022 reversible password encryption must be disabled.</span></span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""> Note: This task has to be run periodically.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif"> </span></b></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">Actions to take:</span></b></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">To
subscribe to the above site, you can use the License Overview Dashboard to
enable and gather the site. Note that you must be entitled to the BigFix
Compliance product, and you must be using BigFix version 10 and later.</span></p>
<p class="MsoNormal" style="margin:0in 0in 26pt 0.5in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">If you use custom sites, update your custom sites accordingly to
use the latest content. You can synchronize your content by using the
Synchronize Custom Checks wizard. For more information, see</span><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif"> </span><span lang="EN"><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="font-size:11.5pt;font-family:"Times New Roman",serif">https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html</span></a></span><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">More information:<br>
</span></b><b><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif"> </span></b><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">To know more about the BigFix Compliance SCM
checklists, please see the following resources:</span></p>
<p class="MsoNormal" style="margin:6pt 0in 6pt 0.75in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">· BigFix Forum:<br>
</span><span lang="EN"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforum.bigfix.com%2Fc%2Frelease-announcements%2Fcompliance&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=UYYRYb3SofshREYync5mCc2d5MUGb53t7OjOCBg%2BoJg%3D&reserved=0"><span style="font-size:11.5pt;font-family:"Times New Roman",serif;color:rgb(34,34,34);text-decoration-line:none"> </span></a><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforum.bigfix.com%2Fc%2Frelease-announcements%2Fcompliance&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=UYYRYb3SofshREYync5mCc2d5MUGb53t7OjOCBg%2BoJg%3D&reserved=0"><span style="font-size:11.5pt;font-family:"Times New Roman",serif">https://forum.bigfix.com/c/release-announcements/compliance</span></a></span><u><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif;color:rgb(17,85,204)"></span></u></p>
<p class="MsoNormal" style="margin:6pt 0in 6pt 0.75in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">· BigFix Compliance SCM Checklists:</span><span lang="EN"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbigfix-wiki.hcltechsw.com%2Fwikis%2Fhome%3Flang%3Denus%23!%2Fwiki%2FBigFix%2520Wiki%2Fpage%2FSCM%2520Checklists&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=sJEji05sRie522iksNIya8RoKSDGBtgSCKlAzsF0N%2Fo%3D&reserved=0"><span style="font-size:11.5pt;font-family:"Times New Roman",serif;color:rgb(34,34,34);text-decoration-line:none"> </span></a><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbigfix-wiki.hcltechsw.com%2Fwikis%2Fhome%3Flang%3Denus%23!%2Fwiki%2FBigFix%2520Wiki%2Fpage%2FSCM%2520Checklists&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=sJEji05sRie522iksNIya8RoKSDGBtgSCKlAzsF0N%2Fo%3D&reserved=0"><span style="font-size:11.5pt;font-family:"Times New Roman",serif">https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists</span></a></span><u><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif;color:rgb(17,85,204)"></span></u></p>
<p class="MsoNormal" style="margin:6pt 0in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif"> </span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">We hope you find this latest release of SCM content useful and
effective. Thank you!</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><i><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif">– The BigFix Compliance team</span></i><span lang="EN" style="font-size:11.5pt;font-family:"Times New Roman",serif"></span></p></div>