<div dir="ltr"><p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">Product:<br>
</span></b><span lang="EN"> BigFix
Compliance</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">Title:<br>
</span></b><span lang="EN">Updated Universal Checklist for Windows Workstation
(Beta) to support more recent versions of CIS and DISA benchmarks.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><i><span lang="EN">Note: The Universal Checklist for
Windows Workstation remains in Beta. This release updates the Beta content with
the latest benchmark coverage.</span></i></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">New to the Universal Checklist for
Windows Workstation? See the original Beta announcement here:
<a href="https://forum.bigfix.com/t/announcing-the-beta-release-universal-checklist-for-windows-workstation/53163">https://forum.bigfix.com/t/announcing-the-beta-release-universal-checklist-for-windows-workstation/53163</a></span><span lang="EN" style="font-family:"Roboto Mono";color:rgb(24,128,56)"></span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">Published Sites:<br>
</span></b><span lang="EN"> Universal
Checklist for Windows Workstation, site version 3<br>
(The site version is provided for
air-gap customers.)</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">Details: Universal Checklist for
Windows Workstation (Beta)</span></b></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Total Fixlets: 657</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Total New Fixlets: 2</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Total Updated Fixlets: 14</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Total Deleted Fixlets: 1</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Fixlets with Remediation: 632</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Parameterized Fixlets: 532</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Benchmark Sources: CIS and DISA
STIGs</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Applies To: Windows Workstation 10
& 11</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">ADDED</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%">All Wi-Fi Direct adapters must be disabled on
the system.</span><span lang="EN"> </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%">Bluetooth must be turned off unless approved by
the organization.</span><span lang="EN"> </span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN"><br>
REMOVED</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:12pt;line-height:115%">Ensure 'Password Settings: Password Complexity'
is set to 'Enabled: Large letters + small letters + numbers + special
characters'</span><span lang="EN"> (extra fixlet)</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN"> </span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">UPDATED</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Ensure 'Password Settings:
Password Complexity' is set to 'Enabled: Large letters + small letters +
numbers + specials' or higher</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Ensure 'Set time limit for active
but idle Remote Desktop Services sessions' is set to 'Enabled: 15 minutes or
less, but not Never (0)'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Ensure 'Enable OneSettings
Auditing' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">The US DoW CCEB Interoperability
Root CA cross-certificates must be installed in the Untrusted Certificates
Store on unclassified systems.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">The DoW Interoperability Root CA
cross-certificates must be installed in the Untrusted Certificates Store on
unclassified systems.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">The DoW Root CA certificates must
be installed in the Trusted Root Store.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">The use of a hardware security
device with Windows Hello for Business must be enabled.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Configure 'Interactive logon:
Message text for users attempting to log on'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Ensure 'Set time limit for
disconnected sessions' is set to 'Enabled: 1 minute'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Windows Workstation must be
configured to audit file system failures.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Windows Workstation must be
configured to audit file system successes.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Windows Workstation must be
configured to audit handle manipulation successes.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">Windows Workstation must be
configured to require a minimum pin length of six characters or greater.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">The Windows PowerShell 2.0 feature
must be disabled on the system.</span></p>
<p class="MsoNormal" style="margin:0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN"> </span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">Actions to take:</span></b></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">To subscribe to the above site,
you can use the License Overview Dashboard to enable and gather the site. Note
that you must be entitled to the BigFix Compliance product, and you must be
using BigFix version 10 and later.</span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">If you use custom sites, update
your custom sites accordingly to use the latest content. You can synchronize
your content by using the Synchronize Custom Checks wizard. For more
information, see<a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="color:windowtext;text-decoration:none"> </span></a><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html">Using the Synchronize Custom Checks wizard</a>.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN">More information:<br>
</span></b><span lang="EN"> To know more
about the BigFix Compliance SCM checklists, please see the following resources:</span></p>
<p class="MsoNormal" style="margin:12pt 0in 0.0001pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">BigFix Forum:<a href="https://forum.bigfix.com/c/release-announcements/compliance"><span style="color:windowtext;text-decoration:none"> </span></a><a href="https://forum.bigfix.com/c/release-announcements/compliance">https://forum.bigfix.com/c/release-announcements/compliance</a></span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt 0.5in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN">BigFix Compliance SCM Checklists:<a href="https://forum.bigfix.com/t/universal-compliance-checklist/54703"><span style="color:windowtext;text-decoration:none"> </span></a><a href="https://forum.bigfix.com/t/universal-compliance-checklist/54703">https://forum.bigfix.com/t/universal-compliance-checklist/54703</a></span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN">We hope you find this latest release of
SCM content useful and effective. Thank you.</span></p>
<p class="MsoNormal" style="margin:12pt 0in;line-height:115%;font-size:11pt;font-family:Arial,sans-serif"><i><span lang="EN">– The BigFix Compliance team</span></i></p></div>