<div dir="ltr"><p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">Hello BigFix Community,</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">We are pleased to announce the release of
a new compliance checklist within <b>BigFix Compliance</b>, designed to support
the <b>NIST Special Publication 800-53 Revision 5</b> framework.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">As organizations, particularly in the US
federal space, defense contracting, and regulated industries, work to align
with NIST SP 800-53 Rev 5, we are expanding our compliance library to help you
automate and audit technical security controls effectively across your Windows
Server environment.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">What is the NIST 800-53 Rev 5
Compliance Checklist?</span></b></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">The NIST 800-53 Rev 5 Compliance
Checklist is a new Checklist designed to assess and enforce compliance against
the security and privacy controls defined in <b>NIST 800-53 Revision 5</b> for
Windows Servers.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">This checklist maps technical controls
directly to NIST 800-53 Rev 5 control families, allowing you to monitor,
enforce, and report on your Windows Server security posture against one of the
most comprehensive federal security frameworks available.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">Technical Snapshot</span></b></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">Here is a quick overview of the coverage
provided in this release:</span></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">Total Fixlets:</span></b><span lang="EN"> 508</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">Fixlets with Remediation:</span></b><span lang="EN"> 488</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">Parameterized Fixlets:</span></b><span lang="EN"> 378</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">Framework:</span></b><span lang="EN"> NIST SP 800-53 Rev 5</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">Applies To:</span></b><span lang="EN"> Windows Server 2016, 2019, 2022, 2025</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">Scope of Coverage</span></b></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">This checklist focuses on the <b>technical
controls</b> that can be monitored and enforced via BigFix, mapped to NIST
800-53 Rev 5 control families. We currently support controls across <b>13
control families</b>:</span></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">Access Control (AC) (Check
Count: 99)</span></b><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">○<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Account Management, Least
Privilege, Access Enforcement, Access Control for Mobile Devices, System Use
Notification, Remote Access</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">Audit and Accountability (AU)
(Check Count: 63)</span></b><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">○<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Protection of Audit Information,
Event Logging, Audit Log Storage Capacity, Audit Record Generation, Time Stamps</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">Configuration Management (CM)
(Check Count: 119)</span></b><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">○<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Policy and Procedures,
Configuration Settings, Software Usage Restrictions, User-Installed Software</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">Contingency Planning (CP)
(Check Count: 4)</span></b><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">○<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">System Backup</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">Identification and
Authentication (IA) (Check Count: 22)</span></b><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">○<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Authenticator Management</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">Incident Response (IR) (Check
Count: 3)</span></b><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">○<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Incident Handling, Incident
Reporting</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">Media Protection (MP) (Check
Count: 5)</span></b><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">○<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Media Use</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">Planning (PL) (Check Count: 3)</span></b><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">○<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Rules of Behavior, Security and
Privacy Architectures</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">Risk Assessment (RA) (Check
Count: 6)</span></b><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">○<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Risk Assessment, Vulnerability
Monitoring and Scanning</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">System and Services Acquisition
(SA) (Check Count: 27)</span></b><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">○<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Developer Security Testing and
Evaluation, Security Engineering Principles, Acquisition Process</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">System and Communications
Protection (SC) (Check Count: 104)</span></b><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">○<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Boundary Protection, Session
Authenticity, Information in Shared System Resources, Transmission
Confidentiality and Integrity, Least Functionality</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">System and Information
Integrity (SI) (Check Count: 42)</span></b><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">○<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Malicious Code Protection, System
Monitoring, Memory Protection, Vulnerability Monitoring and Scanning</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><b><span lang="EN">Supply Chain Risk Management
(SR) (Check Count: 5)</span></b><span lang="EN"></span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 1in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">○<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Component Authenticity, Supply
Chain Controls and Plans</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">How to Get Started</span></b></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">The NIST 800-53 Rev 5 Checklist for
Windows Server is available now. To get started, subscribe to the content from
the NIST 800-53 Rev 5 Checklist for Windows Server external site and deploy it
to your desired endpoints.</span></p>
<ol style="margin-top:0in;margin-bottom:0in" start="1" type="1">
<li class="MsoNormal" style="margin:12pt 0in 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">Enable and gather the NIST 800-53 Rev 5 Checklist for Windows
Server external site from the License Overview Dashboard.</span></li>
<li class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">Create a
custom site using the Create Custom Checks wizard.</span></li>
<li class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">Change the
default parameters if required.</span></li>
<li class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">If you use
custom sites, update them accordingly to use the latest content. You can
synchronize your content by using the Synchronize Custom Checks wizard.
For more information, see<a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="color:windowtext;text-decoration:none"> </span></a><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html">Using the Synchronize Custom Checks wizard</a>.</span></li>
<li class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">Subscribe
all the relevant Windows Server (2016/2019/2022/2025) endpoints.</span></li>
<li class="MsoNormal" style="margin:0in 0in 12pt;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">Run SCA import to get the compliance status reports.</span></li>
</ol>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">More information:</span></b><span lang="EN"> To know more about the BigFix Compliance SCM checklists, please see
the following resources:</span></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">BigFix Forum:<a href="https://forum.bigfix.com/c/release-announcements/compliance"><span style="color:windowtext;text-decoration:none"> </span></a><a href="https://forum.bigfix.com/c/release-announcements/compliance">https://forum.bigfix.com/c/release-announcements/compliance</a></span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">BigFix Compliance SCM Checklists:<a href="https://forum.bigfix.com/c/release-announcements/scm-checklists/86"><span style="color:windowtext;text-decoration:none"> </span></a><a href="https://forum.bigfix.com/c/release-announcements/scm-checklists/86">https://forum.bigfix.com/c/release-announcements/scm-checklists/86</a></span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">We are committed to helping you stay
compliant with the latest regulatory frameworks. If you have questions
regarding specific checks or need assistance with implementation, please feel
free to reply to this thread.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><i><span lang="EN">– The BigFix Compliance Team</span></i></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN"> </span></p></div>