<div dir="ltr"><p class="MsoNormal" style="margin:0in 0in 14pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Product:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
BigFix Compliance</span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Title:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
Updated DISA STIG Checklist for Red Hat Enterprise Linux 9</span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Security Benchmark:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
</span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(41,42,46)">Red Hat Enterprise Linux 9 STIG
SCAP Benchmark</span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">, V2R9</span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Published Sites:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
DISA STIG Checklist for RHEL 9<span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">,
site version 10</span><br>
<span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(The site version is
provided for air-gap customers.)</span></span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Details: </span></b></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total New Fixlets: 1</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total Updated Fixlets: 12</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total Deleted Fixlets: 1</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total Fixlets in Site: 435</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> <b>New Fixlets:</b> </span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> RHEL 9 must audit any script or executable
called by cron as root or by any privileged user.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Updated Fixlets:</span></b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">RHEL 9 must require a boot loader superuser password.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">RHEL 9 SSH private host key files must have mode 0600 or less
permissive.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">RHEL 9 must allow only the information system security manager
(ISSM) (or individuals or roles appointed by the ISSM) to select which
auditable events are to be audited.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">RHEL 9 must generate audit records for all account creations,
modifications, disabling, and termination events that affect /etc/sudoers.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">RHEL 9 must generate audit records for all account creations,
modifications, disabling, and termination events that affect /etc/sudoers.d/.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">RHEL 9 must generate audit records for all account creations,
modifications, disabling, and termination events that affect /etc/group.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">RHEL 9 must generate audit records for all account creations,
modifications, disabling, and termination events that affect /etc/gshadow.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">RHEL 9 must generate audit records for all account creations,
modifications, disabling, and termination events that affect /etc/opasswd.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">RHEL 9 must generate audit records for all account creations,
modifications, disabling, and termination events that affect /etc/passwd.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">RHEL 9 must generate audit records for all account creations,
modifications, disabling, and termination events that affect /etc/shadow.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">RHEL 9 must generate audit records for all account creations,
modifications, disabling, and termination events that affect /var/log/faillock.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">RHEL 9 must generate audit
records for all account creations, modifications, disabling, and termination
events that affect /var/log/lastlog.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Deleted Fixlets:</span></b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> </span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">RHEL 9 SSH daemon must not allow
compression or must only allow compression after successful authentication.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Additional details:</span></b></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Both
analysis and remediation checks are included.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Some
of the checks allow you to use the parameterized setting to enable
customization for compliance evaluation. Note that parameterization and
remediation actions require the creation of a custom site.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Improved
a few checks by adding the pending restart feature to them. The pending restart
feature works in the following ways:</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"> The action results will show “Pending Restart”
instead of “Fixed” for those checks which require OS reboot.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">The
check will show relevant for those endpoints until they are rebooted.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Post
reboot of the endpoint the action results will show as “Fixed” and the check
will be compliant.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Action to take:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">To
subscribe to the above site, you can use the License Overview Dashboard to
enable and gather the site. Note that you must be entitled to the BigFix
Compliance product and you must be using BigFix version 10.0.0 and later.</span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">If
you use custom sites, update your custom sites accordingly to use the latest
content. You can synchronize your content by using the Synchronize Custom
Checks wizard. For more information, see </span><span lang="EN" style="color:black"><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration:none">Using the
Synchronize Custom Checks wizard</span></a></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">More information:<br>
</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">To know more about the BigFix
Compliance SCM checklists, please see the following resources:</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"> </span></p>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">BigFix
Forum:</span></p>
<h3 style="margin:0in 0in 19pt 4pt;text-indent:32pt;line-height:120%;break-after:auto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:14pt;font-family:Arial,sans-serif;color:rgb(67,67,67);font-weight:normal"><a name="_brh36ff0stst"></a><span lang="EN"><a href="https://forum.bigfix.com/c/release-announcements/compliance/63"><b><span style="font-size:12pt;line-height:120%;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration:none">Compliance (Release Announcements)</span></b></a></span><span lang="EN" style="font-size:12pt;line-height:120%;font-family:Calibri,sans-serif;color:rgb(34,34,34)"></span></h3>
<h3 style="margin:0in 0in 19pt 4pt;text-indent:32pt;line-height:120%;break-after:auto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:14pt;font-family:Arial,sans-serif;color:rgb(67,67,67);font-weight:normal"><a name="_g7kyz5xkze3v"></a><span lang="EN" style="font-size:12pt;line-height:120%;font-family:Calibri,sans-serif;color:rgb(34,34,34)">This category is used by HCL to
announce new releases for BigFix Compliance.</span></h3>
<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">BigFix
Compliance SCM Checklists:</span></p>
<h3 style="margin:0in 0in 19pt 4pt;text-indent:32pt;line-height:120%;break-after:auto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:14pt;font-family:Arial,sans-serif;color:rgb(67,67,67);font-weight:normal"><a name="_5eyukxnsv6la"></a><span lang="EN"><a href="https://forum.bigfix.com/c/release-announcements/scm-checklists/86"><b><span style="font-size:12pt;line-height:120%;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration:none">SCM Checklists</span></b></a></span><b><span lang="EN" style="font-size:12pt;line-height:120%;font-family:Calibri,sans-serif;color:rgb(0,136,204)"></span></b></h3>
<p class="MsoNormal" style="margin:12pt 0in 11pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">This category is the central reference for all SCM
Checklists supported by BigFix Compliance. It covers the complete list of
active checklists across all supported frameworks and platforms, including CIS,
DISA STIG, PCI DSS, NIST, and more, along with site name, version details, and
supported OS versions.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">We hope you find this latest release of SCM content
useful and effective. Thank you!<br>
<i>– The BigFix Compliance team</i></span></p></div>