<div dir="ltr"><p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Product:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
BigFix Compliance</span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Title:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
Updated <b>CIS Checklist for Windows 11</b>
to support a more recent version of the benchmark.</span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Security Benchmark:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
CIS Microsoft Windows 11 Enterprise Benchmark, V5.0.0</span><span lang="EN" style="font-size:12pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Published Sites:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
CIS Checklist for Windows 11, site version 15<br>
(The site version is provided for air-gap customers.)</span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Calibri,sans-serif;color:black"><br>
</span><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Details:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total New Fixlets: 14</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total Updated Fixlets:35</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total Deleted Fixlets: 31</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total Fixlets in Site: 560</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">ADDED</span></b><b><span lang="EN" style="font-size:12pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"></span></b></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:none;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Require IPPS for
IPP printers' is set to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:none;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Enable / disable
CLFS logfile authentication' is set to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:none;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Allow Recall to be
enabled' is set to 'Disabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:none;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Set TLS/SSL
security policy for IPP printers: Disallow invalid certificate authority' is
set to 'Enabled: Checked' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:none;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Set TLS/SSL
security policy for IPP printers: Disallow non-server certificates' is set to
'Enabled: Checked' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:none;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Set TLS/SSL
security policy for IPP printers: Disallow invalid certificate common name' is
set to 'Enabled: Checked' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:none;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Set TLS/SSL
security policy for IPP printers: Disallow invalid certificate date' is set to
'Enabled: Checked' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:none;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Disable HTTP proxy
features: Disable WPAD' is set to 'Enabled: Checked' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:none;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Disable HTTP proxy
features: Disable proxy authentication' is set to 'Enabled: Disable
authentication over loopback interfaces'</span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">UPDATED</span></b><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Network
access: Allow anonymous SID/Name translation' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Configures
LSASS to run as a protected process' is set to 'Enabled: Enabled with UEFI
Lock'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Join
Microsoft MAPS' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Audit
Sensitive Privilege Use' is set to 'Success’</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Password
Settings: Password Complexity' is set to 'Enabled: Large letters + small
letters + numbers + special characters' or 'Passphrase'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L2) Ensure 'Interactive
logon: Do not require CTRL+ALT+DEL' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Prevent
automatic download of applications associated with device metadata'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Impersonate a
client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK
SERVICE, SERVICE' TO include 'RESTRICTED SERVICES\PrintSpoolerService' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Windows
Firewall: Domain: Logging: Name' is set to </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">'%SystemRoot%\System32\logfiles\firewall\domainfw.log'
TO is configured </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Windows
Firewall: Private: Logging: Name' is set to
'%SystemRoot%\System32\logfiles\firewall\privatefw.log' TO is configured </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Windows
Firewall: Public: Logging: Name' is set to
'%SystemRoot%\System32\logfiles\firewall\publicfw.log' TO is configured </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L2) Ensure 'Peer
Networking Identity Manager (p2pimsvc)' is set to 'Disabled' or 'Not Installed'
</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L2) Ensure 'Prevent the
usage of OneDrive for file storage' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L2) Ensure 'Allow
widgets' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Generate security
audits' is set to 'LOCAL SERVICE, NETWORK SERVICE', RESTRICTED SERVICES\PrintSpoolerService</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure
'Post-authentication actions: Actions' is set to 'Enabled: Reset the password
and logoff the managed account' or higher</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L2) Ensure 'Limit
Diagnostic Log Collection' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L2) Ensure 'Limit Dump
Collection' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Peer Name
Resolution Protocol (PNRPsvc)' is set to 'Disabled' or 'Not Installed' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Peer Networking
Grouping (p2psvc)' is set to 'Disabled' or 'Not Installed'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'PNRP Machine Name
Publication Service (PNRPAutoReg)' is set to 'Disabled' or 'Not Installed'</span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">DELETED</span></b><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(BL) Ensure 'Disable new
DMA devices when this computer is locked' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Microsoft
network client: Digitally sign communications (if server agrees)' is set to
'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Microsoft
network server: Digitally sign communications (if client agrees)' is set to
'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Network
security: Do not store LAN Manager hash value on next password change' is set
to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Select when
Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or
more days'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Disable
OneSettings Downloads' is set to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Always
install with elevated privileges' is set to 'Disabled' FROM User Section </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Change the
time zone' is set to 'Administrators, LOCAL SERVICE, Users' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Turn off
Windows Copilot' is set to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Configure
registry policy processing: Do not apply during periodic background processing'
is set to 'Enabled: FALSE' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Configure
registry policy processing: Process even if the Group Policy objects have not
changed' is set to 'Enabled: TRUE' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(BL) Ensure 'Interactive
logon: Machine account lockout threshold' is set to '10 or fewer invalid logon
attempts, but not 0'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'MSS:
(ScreenSaverGracePeriod) The time in seconds before the screen saver grace
period expires' is set to 'Enabled: 5 or fewer seconds'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'WinHTTP Web Proxy
Auto-Discovery Service (WinHttpAutoProxySvc)' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Configure use of
passwords for operating system drives' is set to 'Disabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Require additional
authentication at startup: Allow BitLocker without a compatible TPM' is set to
'Enabled: False' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Require additional
authentication at startup' is set to 'Enabled' </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Turn on Basic feed
authentication over HTTP' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""> </span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Both analysis and
remediation checks are included</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Some of the checks allow
you to use the parameterized setting to enable customization for compliance
evaluation. Note that parameterization and remediation actions require the
creation of a custom site.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""> </span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Actions to take:</span></b><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:14pt 0in 14pt 0.5in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">To subscribe to the
above site, you can use the License Overview Dashboard to enable and gather the
site. Note that you must be entitled to the BigFix Compliance product, and you
must be using BigFix version 10 and later</span><span lang="EN" style="font-size:12pt">.</span><span lang="EN" style="font-size:12pt"></span></p>
<p class="MsoNormal" style="margin:6pt 0in 0.0001pt 0.5in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-family:Calibri,sans-serif;color:rgb(5,99,193)">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">If you use custom sites,
update your custom sites accordingly to use the latest content. You can
synchronize your content by using the Synchronize Custom Checks wizard. For
more information, see </span><u><span lang="EN" style="font-family:Calibri,sans-serif;color:rgb(5,99,193)"></span></u></p>
<p class="MsoNormal" style="margin:0in 0in 14pt 0.5in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN"><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="font-family:Calibri,sans-serif;color:rgb(5,99,193)">https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html</span></a></span><u><span lang="EN" style="font-family:Calibri,sans-serif;color:rgb(5,99,193)"></span></u></p>
<p class="MsoNormal" style="line-height:normal;margin:0in;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">More information:</span></b><b><span lang="EN" style="font-size:10pt;font-family:Calibri,sans-serif"> </span></b><span lang="EN" style="font-size:10pt;font-family:Calibri,sans-serif"><br>
</span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">To know more about the BigFix Compliance SCM checklists, please
see the following resources:</span><b><span lang="EN" style="font-size:10pt;font-family:Calibri,sans-serif"></span></b></p>
<p class="MsoNormal" style="margin:6pt 0in 0.0001pt 0.5in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-family:Calibri,sans-serif;color:rgb(5,99,193)">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">BigFix Forum:<br>
</span><span lang="EN"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforum.bigfix.com%2Fc%2Frelease-announcements%2Fcompliance&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=UYYRYb3SofshREYync5mCc2d5MUGb53t7OjOCBg%2BoJg%3D&reserved=0"><span style="font-family:Calibri,sans-serif;color:rgb(5,99,193)">https://forum.bigfix.com/c/release-announcements/compliance</span></a></span><u><span lang="EN" style="font-family:Calibri,sans-serif;color:rgb(5,99,193)"></span></u></p>
<p class="MsoNormal" style="margin:0in 0in 6pt 0.5in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Times New Roman",serif">●<span style="font-variant-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">BigFix Compliance SCM
Checklists:</span><span lang="EN" style="font-size:10pt;font-family:Calibri,sans-serif"><br>
</span><span lang="EN"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fbigfix-wiki.hcltechsw.com%2Fwikis%2Fhome%3Flang%3Denus%23!%2Fwiki%2FBigFix%2520Wiki%2Fpage%2FSCM%2520Checklists&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=sJEji05sRie522iksNIya8RoKSDGBtgSCKlAzsF0N%2Fo%3D&reserved=0"><span style="font-family:Calibri,sans-serif;color:rgb(5,99,193)">https://bigfix-wiki.hcltechsw.com/wikis/home?lang=enus#!/wiki/BigFix%20Wiki/page/SCM%20Checklists</span></a></span><span lang="EN" style="font-size:10pt;font-family:"Times New Roman",serif"></span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">We hope
you find this latest release of SCM content useful and effective. Thank you!</span><span lang="EN" style="font-size:10.5pt;font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><i><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">– The BigFix Compliance
team</span></i><i><span lang="EN" style="font-size:10pt;font-family:Calibri,sans-serif"></span></i></p></div>