<div dir="ltr"><h3 style="margin:10pt 0in 0in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189)"><span style="font-family:Cambria,serif;font-size:12pt;font-weight:normal;color:rgb(34,34,34)">Hello
BigFix Community,</span></h3>
<p class="gmail-MsoBodyText" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">We
are excited to announce the beta release of the new Universal Checklist for
Windows Workstation, the next stage of a major initiative to simplify and
streamline compliance management in BigFix.</p>
<p class="gmail-MsoBodyText" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">This
is the second release from our new <b>Universal Checklist initiative</b>, a
project designed to simplify compliance management by creating single,
platform-specific checklists that work across all supported OS versions. This
initiative will ultimately reduce complexity and improve performance across
your entire environment.</p>
<p class="gmail-MsoBodyText" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">This
next stage is focused specifically on Windows Workstation, and here’s what it
means for you today</p>
<h4 style="margin:10pt 0in 0in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="X4863a1fede381b7c56694473e0d50fedb0c2017"><b>What is the Universal
Checklist for Windows Workstation?</b></a></h4>
<p class="gmail-FirstParagraph" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">The Universal
Checklist for Windows Workstation is a consolidated checklist designed to
assess general purpose compliance across all supported Windows Workstation
versions, both Windows Workstation 10 and 11.</p>
<p class="gmail-MsoBodyText" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">The second beta
release is a collection of all the checks from CIS and DISA benchmarks for all
the supported Windows Workstations. It allows you to enforce security
configurations across your entire Windows Workstation environment with a single
action.</p>
<h4 style="margin:10pt 0in 0in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="technical-snapshot"><b>Technical Snapshot</b></a></h4>
<h4 style="margin:10pt 0in 0in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="total-fixlets-627">Total Fixlets: 627</a></h4>
<h4 style="margin:10pt 0in 0in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="fixlets-with-remediation-606">Fixlets with Remediation: 606</a></h4>
<h4 style="margin:10pt 0in 0in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="parameterized-fixlets-505">Parameterized Fixlets : 505</a></h4>
<h4 style="margin:10pt 0in 0in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="benchmark-sources-cis-and-disa-stigs">Benchmark Sources: CIS and DISA STIGs</a></h4>
<h4 style="margin:10pt 0in 0in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="applies-to-windows-workstation-10-and-11">Applies To: Windows Workstation
10 and 11</a></h4>
<h4 style="margin:10pt 0in 0in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="key-benefits-in-this-beta-release"><b>Key Benefits in This Beta Release</b></a></h4>
<p class="gmail-Compact" style="margin:1.8pt 0in 1.8pt 0.5in;font-size:12pt;font-family:Cambria,serif">•<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span><b>Simplified Workflow</b>: Instead of selecting
and managing multiple checklists for different OS versions (e.g., for 10 and
11), you can now deploy a single universal checklist to scan all your Windows
Workstation endpoints. This new model eliminates the need to manually identify,
enable, and run multiple OS-specific checklists, significantly cutting down on
configuration time<br>
<br>
</p>
<p class="gmail-Compact" style="margin:1.8pt 0in 1.8pt 0.5in;font-size:12pt;font-family:Cambria,serif">•<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span><b>Version-aware applicability</b>: The
checklist uses version-aware applicability logic, ensuring checks only apply to
relevant OS versions.</p>
<h4 style="margin:10pt 0in 0in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="whats-changing"><b>What’s Changing</b></a></h4>
<h4 style="margin:10pt 0in 0in 0.5in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="X436fd73e037ba7275baa7adba900cc8d380e39c"><span style="font-style:normal">•<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b>A Single Checklist Model:</b> You will now
manage and deploy one checklist for the entire Windows Workstation platform,
rather than one for each OS version and Benchmark.</a></h4>
<h4 style="margin:10pt 0in 0in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="what-stays-the-same"><b>What Stays the Same</b></a></h4>
<h4 style="margin:10pt 0in 0in 0.5in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="X8647997ccad6d6603088e4dc574752046b641b3"><span style="font-style:normal">•<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b>Custom Checklist Creation:</b> Your workflow
for creating custom checklists is not changing. You can still use the “Create
Custom Checklist” wizard with the content from this new Universal Checklist.</a></h4>
<p class="MsoNormal" style="margin:0in 0in 10pt 0.5in;font-size:12pt;font-family:Cambria,serif">•<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span><b>Parameterization</b>: The ability to
parameterize checks, where applicable, remains unchanged from the existing
process.</p>
<h4 style="margin:10pt 0in 0in 0.5in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="Xbe805e1e429a3da578dd1be0da15298aa721eb0"><span style="font-style:normal">•<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b>Checklist-Level Reporting:</b> For this beta
phase, you will find the compliance score for the Universal Checklist in the
same location as your other checklists SCA > Reports > Checklists
section. or you can access the same data by running the existing compliance
reports in Web Reports
(https://<bigfix_Workstation_name>:8083/webreports)</a></h4>
<p class="MsoNormal" style="margin:0in 0in 10pt 0.5in;font-size:12pt;font-family:Cambria,serif"> <span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span><b><i>Note:</i></b><i> It is important to note
that this report shows the overall compliance for the general-purpose Universal
Checklist itself and is not a substitute for a benchmark-specific (e.g., CIS or
DISA) report.</i></p>
<h4 style="margin:10pt 0in 0in 0.5in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="Xa29a8c09da71d23a2b5085d1fe605bfd7d42542"><span style="font-style:normal">•<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b>Availability of Individual CIS/DISA
Checklists:</b> This Universal Checklist is for general-purpose use. To
generate specific CIS or DISA compliance reports, you must continue to use the
individual CIS and DISA checklists, which will still be delivered through the
existing method.</a></h4>
<h4 style="margin:10pt 0in 0in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="how-to-get-started"><b>How to Get Started</b></a></h4>
<p class="gmail-FirstParagraph" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">The Universal Checklist for Windows
Workstation (Beta) is available now. To get started, please subscribe to the
content from the <span class="gmail-VerbatimChar" style="font-family:Consolas"><span style="font-size:11pt">[Universal Checklist for
Windows Workstation]</span></span> external site and deploy it to your desired
endpoints.</p>
<p class="gmail-MsoBodyText" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">To get started:</p>
<p class="gmail-MsoBodyText" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">1. Enable and gather the Universal
Checklist for Windows Workstation external site from the License Overview
Dashboard.</p>
<p class="gmail-MsoBodyText" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">2. Create a custom site using Create
Custom Checks wizard.</p>
<p class="gmail-MsoBodyText" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">3. Change the default parameters if
required.</p>
<p class="gmail-MsoBodyText" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">4. If you use custom sites, update your
custom sites accordingly to use the latest content. You can synchronize your
content by using the Synchronize Custom Checks wizard. For more information,
see <a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html" style="color:rgb(79,129,189)">Using the Synchronize Custom Checks
wizard</a></p>
<p class="gmail-MsoBodyText" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">5. Subscribe all the relevant Windows
Workstation (10/11) endpoints.</p>
<p class="gmail-MsoBodyText" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">6. Run SCA import to get the compliance
status reports.</p>
<h4 style="margin:10pt 0in 0in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="we-need-your-feedback"><b>We Need Your Feedback</b></a></h4>
<p class="gmail-FirstParagraph" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">As this is a beta release, your
feedback is crucial. Please share your experience, report any issues, and
provide suggestions in this forum thread to help us prepare for the general
availability release.</p>
<h4 style="margin:10pt 0in 0in;break-after:avoid;font-size:12pt;font-family:Calibri,sans-serif;color:rgb(79,129,189);font-weight:normal;font-style:italic"><a name="whats-next"><b>What’s Next?</b></a></h4>
<p class="gmail-FirstParagraph" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">This is just the beginning! Future stages of
the Universal Checklist initiative will include:</p>
<p class="gmail-Compact" style="margin:1.8pt 0in 1.8pt 0.5in;font-size:12pt;font-family:Cambria,serif">•<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span>Expansion to other platforms like macOS, and
multiple Linux distributions.<br>
<br>
</p>
<p class="gmail-Compact" style="margin:1.8pt 0in 1.8pt 0.5in;font-size:12pt;font-family:Cambria,serif">•<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span>The Universal Checklist will introduce advanced
framework-specific mapping for standards like CIS, DISA, PCI DSS, HIPAA, and
others, enabling capabilities including:</p>
<p class="gmail-Compact" style="margin:1.8pt 0in 1.8pt 1in;font-size:12pt;font-family:Cambria,serif">–<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span>Framework-specific scoring<br>
<br>
</p>
<p class="gmail-Compact" style="margin:1.8pt 0in 1.8pt 1in;font-size:12pt;font-family:Cambria,serif">–<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span>Drill-down by Fixlet, device, and group<br>
<br>
</p>
<p class="gmail-Compact" style="margin:1.8pt 0in 1.8pt 1in;font-size:12pt;font-family:Cambria,serif">–<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span>Historical trend analysis<br>
<br>
</p>
<p class="gmail-Compact" style="margin:1.8pt 0in 1.8pt 1in;font-size:12pt;font-family:Cambria,serif">–<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span>Exportable audit reports</p>
<p class="gmail-FirstParagraph" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif">Thank you for your continued support and
participation.</p>
<p class="gmail-MsoBodyText" style="margin:9pt 0in;font-size:12pt;font-family:Cambria,serif"><i>– The BigFix Compliance team</i></p></div>