<div dir="ltr"><p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">Product:<br>
</span></b><span lang="EN"> BigFix
Compliance</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">Title:<br>
</span></b><span lang="EN">Updated Universal Checklist for Windows Workstation
(Beta) to support more recent versions of CIS and DISA benchmarks.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><i><span lang="EN">Note: The Universal Checklist for
Windows Workstation remains in Beta. This release updates the Beta content with
the latest benchmark coverage.</span></i></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">New to the Universal Checklist for
Windows Workstation? See the original Beta announcement here:
<a href="https://forum.bigfix.com/t/announcing-the-beta-release-universal-checklist-for-windows-workstation/53163">https://forum.bigfix.com/t/announcing-the-beta-release-universal-checklist-for-windows-workstation/53163</a></span><span lang="EN" style="font-family:"Roboto Mono";color:rgb(24,128,56)"></span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">Published Sites:<br>
</span></b><span lang="EN"> Universal
Checklist for Windows Workstation, site version 2<br>
(The site version is provided for
air-gap customers.)</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">Details: Universal Checklist for
Windows Workstation (Beta)</span></b></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Total Fixlets: 656</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Total New Fixlets: 31</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Total Updated Fixlets: 32</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Total Deleted Fixlets: 2</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Fixlets with Remediation: 632</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Parameterized Fixlets: 532</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Benchmark Sources: CIS and DISA
STIGs</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Applies To: Windows Workstation 10
& 11</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">ADDED<br>
● Ensure 'Require IPPS for IPP printers' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Enable / disable CLFS logfile
authentication' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Allow Recall to be enabled' is set
to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Set TLS/SSL security policy for IPP
printers: Disallow invalid certificate authority' is set to 'Enabled: Checked'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Set TLS/SSL security policy for IPP
printers: Disallow non-server certificates' is set to 'Enabled: Checked'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Set TLS/SSL security policy for IPP
printers: Disallow invalid certificate common name' is set to 'Enabled:
Checked'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Set TLS/SSL security policy for IPP
printers: Disallow invalid certificate date' is set to 'Enabled: Checked'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Disable HTTP proxy features: Disable
WPAD' is set to 'Enabled: Checked'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Disable HTTP proxy features: Disable
proxy authentication' is set to 'Enabled: Disable authentication over loopback
interfaces'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Windows Workstation must be configured to
audit file system failures.</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Windows Workstation must be configured to
audit file system successes.</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Windows Workstation must be configured to
audit handle manipulation failures.</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Windows Workstation must be configured to
audit handle manipulation successes.</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Windows Workstation must be configured to
audit registry failures.</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Windows Workstation must be configured to
audit registry successes.</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● The Secondary Logon service must be disabled
on Windows 10.</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Windows Telemetry must not be configured to
Full.</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Generate security audits' is set to
'LOCAL SERVICE, NETWORK SERVICE, RESTRICTED SERVICES\PrintSpoolerService'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Impersonate a client after
authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE,
SERVICE, RESTRICTED SERVICES\PrintSpoolerService'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Windows Firewall: Domain: Logging:
Name' is configured</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Windows Firewall: Private: Logging:
Name' is configured</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Windows Firewall: Public: Logging:
Name' is configured</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Prevent automatic download of
applications associated with device metadata' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Password Settings: Password
Complexity' is set to 'Enabled: Large letters + small letters + numbers +
special characters' or 'Passphrase'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Post-authentication actions:
Actions' is set to 'Enabled: Reset the password and logoff the managed account'
or higher (B)</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Let Windows apps activate with voice
while the system is locked' is set to 'Enabled: Force Deny'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Configure local setting override for
reporting to Microsoft MAPS' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Peer Name Resolution Protocol
(PNRPsvc)' is set to 'Disabled' or 'Not Installed'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Peer Networking Grouping (p2psvc)'
is set to 'Disabled' or 'Not Installed'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Peer Networking Identity Manager
(p2pimsvc)' is set to 'Disabled' or 'Not Installed'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'PNRP Machine Name Publication
Service (PNRPAutoReg)' is set to 'Disabled' or 'Not Installed'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN"> </span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN"><br>
REMOVED</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Data Execution Prevention (DEP) must be
configured to at least OptOut.</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● The built-in administrator account must be
disabled.</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN"> </span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">UPDATED</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Account lockout duration' is set to
'15 or more minute(s)'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Adjust memory quotas for a process'
is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Replace a process level token' is
set to 'LOCAL SERVICE, NETWORK SERVICE'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Configure 'Accounts: Rename administrator
account'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Configure 'Accounts: Rename guest account'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Interactive logon: Do not require
CTRL+ALT+DEL' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Enable Certificate Padding' is set
to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Limit Diagnostic Log Collection' is
set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Limit Dump Collection' is set to
'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Prevent the usage of OneDrive for
file storage' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Allow widgets' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Credential Guard must be running on Windows
Workstation domain-joined systems.</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Windows Workstation must be configured to
prevent certificate error overrides in Microsoft Edge.</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Windows Workstation must be configured to
audit Other Policy Change Events Successes.</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Disable new DMA devices when this
computer is locked' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Microsoft network client: Digitally
sign communications (if server agrees)' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Microsoft network server: Digitally
sign communications (if client agrees)' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Network security: Do not store LAN
Manager hash value on next password change' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Select when Preview Builds and
Feature Updates are received' is set to 'Enabled: 180 or more days'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Disable OneSettings Downloads' is
set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Always install with elevated
privileges' is set to 'Disabled' FROM User Section</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Change the time zone' is set to
'Administrators, LOCAL SERVICE, Users'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Turn off Windows Copilot' is set to
'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Configure registry policy
processing: Do not apply during periodic background processing' is set to
'Enabled: FALSE'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Configure registry policy
processing: Process even if the Group Policy objects have not changed' is set
to 'Enabled: TRUE'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Interactive logon: Machine account
lockout threshold' is set to '10 or fewer invalid logon attempts, but not 0'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'MSS: (ScreenSaverGracePeriod) The
time in seconds before the screen saver grace period expires' is set to
'Enabled: 5 or fewer seconds'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'WinHTTP Web Proxy Auto-Discovery
Service (WinHttpAutoProxySvc)' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Configure use of passwords for
operating system drives' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Require additional authentication at
startup: Allow BitLocker without a compatible TPM' is set to 'Enabled: False'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Require additional authentication at
startup' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">● Ensure 'Turn on Basic feed authentication
over HTTP' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">Actions to take:</span></b></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">To subscribe to the above site,
you can use the License Overview Dashboard to enable and gather the site. Note
that you must be entitled to the BigFix Compliance product, and you must be
using BigFix version 10 and later.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">If you use custom sites, update
your custom sites accordingly to use the latest content. You can synchronize
your content by using the Synchronize Custom Checks wizard. For more
information, see<a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="color:windowtext;text-decoration:none"> </span></a><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html">Using the Synchronize Custom Checks wizard</a>.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">More information:<br>
</span></b><span lang="EN"> To know more
about the BigFix Compliance SCM checklists, please see the following resources:</span></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">BigFix Forum:<a href="https://forum.bigfix.com/c/release-announcements/compliance"><span style="color:windowtext;text-decoration:none"> </span></a><a href="https://forum.bigfix.com/c/release-announcements/compliance">https://forum.bigfix.com/c/release-announcements/compliance</a></span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">BigFix Compliance SCM Checklists:<a href="https://forum.bigfix.com/t/universal-compliance-checklist/54703"><span style="color:windowtext;text-decoration:none"> </span></a><a href="https://forum.bigfix.com/t/universal-compliance-checklist/54703">https://forum.bigfix.com/t/universal-compliance-checklist/54703</a></span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">We hope you find this latest release of
SCM content useful and effective. Thank you.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><i><span lang="EN">– The BigFix Compliance team</span></i></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN"> </span></p></div>