<div dir="ltr"><div dir="ltr"><p class="MsoNormal" style="margin:0in 0in 14pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Product:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
BigFix Compliance</span></p>

<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Title:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
Updated CIS Checklist for Debian Linux 12</span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(41,42,46);background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> </span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> </span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>

<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Security Benchmark:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
</span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(41,42,46)">CIS Debian Linux 12 Benchmark</span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">, V2.0.0</span></p>

<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Published Sites:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"><br>
CIS Checklist for Debian Linux 12<span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">, site version 4</span><br>
<span style="background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">(The site version is
provided for air-gap customers.)</span></span></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Details: </span></b></p>

<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total New Fixlets: 83</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total Updated Fixlets: 86</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total Deleted Fixlets: 49</span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif"> Total Fixlets in Site: 327</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">New Fixlets:</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to /etc/apt/auth.conf.d directory is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to /etc/apt/sources.list.d directory is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to /etc/apt/trusted.gpg.d directory is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to /etc/cron.yearly is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to /usr/share/keyrings directory is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to crontab is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to files in /etc/apt/sources.list.d are configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to files in the /etc/apt/auth.conf.d/ directory is
configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to pam_motd file is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to sshd warning banner is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure atm kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure Automatic Error Reporting is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure can kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure cryptographic mechanisms are used to protect the
integrity of audit tools</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify /etc/group information are collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify /etc/hosts and /etc/hostname are
collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify /etc/issue and /etc/<a href="http://issue.net">issue.net</a> are
collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify /etc/netplan are collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify /etc/network and /etc/networks are
collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify /etc/nsswitch.conf file are collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify /etc/pam.conf and /etc/pam.d/
information are collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify /etc/passwd information are collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify /etc/security/opasswd are collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify /etc/shadow and /etc/gshadow are
collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify sethostname and setdomainname are
collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure firewire-core kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure fs.protected_hardlinks is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure fs.protected_symlinks is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure fs.suid_dumpable is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM automount is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM autorun-never is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM disable-user-list is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure journald is configured to send logs to rsyslog</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure kernel.dmesg_restrict is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure kernel.kptr_restrict is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure latest version of cracklib-runtime is installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.all.accept_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.all.accept_source_route is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.all.forwarding is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.all.log_martians is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.all.rp_filter is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.all.secure_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.all.send_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.default.accept_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.default.accept_source_route is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.default.forwarding is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.default.log_martians is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.default.rp_filter is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.default.secure_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.conf.default.send_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.icmp_echo_ignore_broadcasts is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.icmp_ignore_bogus_error_responses is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.ip_forward is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv4.tcp_syncookies is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.all.accept_ra is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.all.accept_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.all.accept_source_route is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.all.forwarding is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.default.accept_ra is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.default.accept_redirects is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.default.accept_source_route is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure net.ipv6.conf.default.forwarding is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure overlay kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure pam_motd is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure rsyslog forwarding uses gtls</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure rsyslog is configured to send logs to a remote log host</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure rsyslog is installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure rsyslog is not configured to receive logs from a remote
client</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure rsyslog log file creation mode is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure rsyslog service is enabled and active</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure rsyslog-gnutls is installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd ListenAddress is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd post-quantum cryptography key exchange algorithms
are configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd warning Banner is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sudo timestamp_timeout is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure systemd-coredump ProcessSizeMax is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure systemd-coredump Storage is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure telnet server services are not in use</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure the source.list and .source files use the Signed-By
option</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure ufw incoming default is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure ufw routed default is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure weak dependencies are configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure Xwayland is configured</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Updated Fixlets:</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure /etc/issue is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure /etc/<a href="http://issue.net">issue.net</a> is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure /etc/motd is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to /etc/motd is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to /etc/security/opasswd is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to /etc/ssh/sshd_config is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to all logfiles has been configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to at is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure access to the su command is restricted</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure actions as another user are always logged</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure all AppArmor Profiles are enforcing</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure audit configuration files mode is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure audit configuration files owner is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure audit log files mode is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure audit log files owner is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure audit tools mode is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure audit tools owner is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure chrony is running as user _chrony</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure dccp kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure default user shell timeout is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure dhcp server services are not in use</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure file deletion events by users are collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure filesystem integrity is regularly checked</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure ftp client is not installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM login banner is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM screen lock is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure group root is the only GID 0 group</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure IPv6 status is identified</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure journald Compress is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure kernel.randomize_va_space is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure kernel.yama.ptrace_scope is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure latest version of libpam-modules is installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure latest version of libpam-pwquality is installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure latest version of pam is installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure local interactive user dot files access is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure local interactive user home directories are configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure mail transfer agents are configured for local-only mode</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure minimum password days is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure no duplicate GIDs exist</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure no duplicate group names exist</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure no duplicate UIDs exist</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure no duplicate user names exist</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure pam_unix includes a strong password hashing algorithm</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure pam_unix includes use_authtok</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure pam_unix module is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure password complexity is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure password dictionary check is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure password expiration is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure password failed attempts lockout includes root account</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure prelink is not installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure rds kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure root account access is controlled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure root path integrity</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure root user umask is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure rsh client is not installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sctp kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd access is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd Ciphers are configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd ClientAliveInterval and ClientAliveCountMax are
configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd DisableForwarding is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd GSSAPIAuthentication is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd HostbasedAuthentication is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd IgnoreRhosts is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd KexAlgorithms is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd LogLevel is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd MACs are configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd MaxAuthTries is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd MaxSessions is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd MaxStartups is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd PermitEmptyPasswords is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd PermitRootLogin is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd PermitUserEnvironment is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sshd UsePAM is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sudo commands use pty</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure system is disabled when audit logs are full</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure system warns when audit logs are low on space</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure telnet client is not installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure tipc kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure usb-storage kernel module is not available</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure use of privileged commands are collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure users must provide password for escalation</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure web proxy server services are not in use</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure web server services are not in use</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure world writable files and directories are secured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure X window server services are not in use</span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure XDMCP is not enabled</span></p>

<p class="MsoNormal" style="margin:12pt 0in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Deleted Fixlets:</span></b></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure a nftables table exists</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure all AppArmor Profiles are in enforce or complain mode</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure bogus icmp responses are ignored</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure broadcast icmp requests are ignored</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure core dumps are restricted</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure crontab is restricted to authorized users</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify the system's network environment are
collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure events that modify user/group information are collected</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM automatic mounting of removable media is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM autorun-never is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM autorun-never is not overridden</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM disable-user-list option is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM disabling automatic mounting of removable media is
not overridden</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM is removed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure GDM screen locks cannot be overridden</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure icmp redirects are not accepted</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure ip forwarding is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure ip6tables default deny firewall policy</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure ip6tables loopback traffic is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure iptables are flushed with nftables</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure iptables default deny firewall policy</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure iptables loopback traffic is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure iptables packages are installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure iptables-persistent is not installed with ufw</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure ipv6 router advertisements are not accepted</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure journald ForwardToSyslog is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure nftables base chains exist</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure nftables default deny firewall policy</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure nftables is installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure nftables is not installed with iptables</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure nftables loopback traffic is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure nftables outbound and established connections are
configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure nftables rules are permanent</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure nftables service is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure only one logging system is in use</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure packet redirect sending is disabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure reverse path filtering is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure secure icmp redirects are not accepted</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure source routed packets are not accepted</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure sudo authentication timeout is configured correctly</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure suspicious packets are logged</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure systemd-journal-remote authentication is configured</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure systemd-journal-remote is installed</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure systemd-journal-upload is enabled and active</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure tcp syn cookies is enabled</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure ufw default deny firewall policy</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure ufw is uninstalled or disabled with iptables</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure ufw is uninstalled or disabled with nftables</span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">      </span></span><span lang="EN" style="font-size:12pt;line-height:115%;font-family:Calibri,sans-serif">Ensure ufw loopback traffic is
configured</span></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Additional details:</span></b></p>

<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Both
analysis and remediation checks are included.</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Some
of the checks allow you to use the parameterized setting to enable
customization for compliance evaluation. Note that parameterization and
remediation actions require the creation of a custom site.</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Improved
a few checks by adding the pending restart feature to them. The pending restart
feature works in the following ways:</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"> The action results will show “Pending Restart”
instead of “Fixed” for those checks which require OS reboot.</span></p>

<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">The
check will show relevant for those endpoints until they are rebooted.</span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Post
reboot of the endpoint the action results will show as “Fixed” and the check
will be compliant.</span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"> </span></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">Action to take:</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>

<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">To
subscribe to the above site, you can use the License Overview Dashboard to
enable and gather the site. Note that you must be entitled to the BigFix
Compliance product and you must be using BigFix version 10.0.0 and later.</span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>

<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">If
you use custom sites, update your custom sites accordingly to use the latest
content. You can synchronize your content by using the Synchronize Custom
Checks wizard. For more information, see </span><span lang="EN" style="color:black"><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration:none">Using the
Synchronize Custom Checks wizard</span></a></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">More information:<br>
</span></b><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">To know more about the BigFix
Compliance SCM checklists, please see the following resources:</span></p>

<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">BigFix
Forum:</span></p>

<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="color:black"><a href="https://forum.bigfix.com/c/release-announcements/compliance/63"><b><span style="font-size:12pt;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration:none">Compliance
(Release Announcements)</span></b></a></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif"></span></p>

<h3 style="margin:0in 0in 19pt 4pt;text-indent:32pt;line-height:120%;break-after:auto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:14pt;font-family:Arial,sans-serif;color:rgb(67,67,67);font-weight:normal"><a name="_l2eklybaxxzi"></a><span lang="EN" style="font-size:12pt;line-height:120%;font-family:Calibri,sans-serif;color:rgb(34,34,34)">This category is used by HCL to
announce new releases for BigFix Compliance.</span></h3>

<p class="MsoNormal" style="margin:12pt 0in 12pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">     
</span></span><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">BigFix
Compliance SCM Checklists:</span></p>

<h3 style="margin:0in 0in 19pt 4pt;text-indent:32pt;line-height:120%;break-after:auto;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:14pt;font-family:Arial,sans-serif;color:rgb(67,67,67);font-weight:normal"><a name="_9axu8r4aa0ew"></a><span lang="EN"><a href="https://forum.bigfix.com/c/release-announcements/scm-checklists/86"><b><span style="font-size:12pt;line-height:120%;font-family:Calibri,sans-serif;color:rgb(0,136,204);text-decoration:none">SCM Checklists</span></b></a></span><b><span lang="EN" style="font-size:12pt;line-height:120%;font-family:Calibri,sans-serif;color:rgb(0,136,204)"></span></b></h3>

<p class="MsoNormal" style="margin:12pt 0in 11pt 40pt;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">This category is the central reference for all SCM
Checklists supported by BigFix Compliance. It covers the complete list of
active checklists across all supported frameworks and platforms, including CIS,
DISA STIG, PCI DSS, NIST, and more, along with site name, version details, and
supported OS versions.</span></p>

<p class="MsoNormal" style="margin:12pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;font-family:Calibri,sans-serif">We hope you find this latest release of SCM content
useful and effective. Thank you!<br>
<i>– The BigFix Compliance team</i></span></p><br></div>
</div>