<div dir="ltr"><p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Product:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
BigFix Compliance</span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Title:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
Updated <b>CIS Checklist for Windows 10</b> to support a more recent version of
the benchmark.</span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Security
Benchmark:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
CIS Microsoft Windows 10 Enterprise Benchmark, V5.0.0</span><span lang="EN" style="font-size:12pt"></span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Published
Sites:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""><br>
CIS Checklist for Windows 10, site version 28<br>
(The site version is provided for air-gap customers.)</span></p>
<p class="MsoNormal" style="margin:14pt 0in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10pt;font-family:Calibri,sans-serif;color:black"><br>
</span><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Details:</span></b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total New Fixlets: 2</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total Updated Fixlets:11</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total Deleted Fixlets:44</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">Total Fixlets in Site: 501</span></p>
<p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"> </span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><b><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">ADDED</span></b><b><span lang="EN" style="font-size:12pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial"></span></b></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Enable / disable
CLFS logfile authentication' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Disable HTTP proxy
features: Disable WPAD' is set to 'Enabled: Checked'</span></p>
<p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border-width:medium;border-style:none;border-color:currentcolor;margin:0in;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""> </span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><b><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">UPDATED</span></b><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Audit Sensitive
Privilege Use' is set to 'Success'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Interactive logon:
Do not require CTRL+ALT+DEL' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Windows Firewall:
Domain: Logging: Name' is configured</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Windows Firewall:
Private: Logging: Name' is configured</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Windows Firewall:
Public: Logging: Name' is configured</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Prevent the usage
of OneDrive for file storage' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Allow widgets' is
set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Limit Diagnostic
Log Collection' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Limit Dump
Collection' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Enable OneSettings
Auditing' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Ensure 'Set time limit for
active but idle Remote Desktop Services sessions' is set to 'Enabled: 15
minutes or less, but not Never (0)'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""> </span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><b><span lang="EN" style="font-size:10pt;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial">DELETED</span></b><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Change the
time zone' is set to 'Administrators, LOCAL SERVICE, Users'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Microsoft
network server: Digitally sign communications (if client agrees)' is set to
'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Microsoft
network client: Digitally sign communications (if server agrees)' is set to
'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Configure
registry policy processing: Do not apply during periodic background processing'
is set to 'Enabled: FALSE'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Configure
detection for potentially unwanted applications' is set to 'Enabled: Block'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Configure
registry policy processing: Process even if the Group Policy objects have not
changed' is set to 'Enabled: TRUE'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'MSS:
(ScreenSaverGracePeriod) The time in seconds before the screen saver grace
period expires' is set to 'Enabled: 5 or fewer seconds'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L2) Ensure 'Set time
limit for disconnected sessions' is set to 'Enabled: 1 minute'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Configure
Attack Surface Reduction rules' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Turn on
e-mail scanning' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Configure
local setting override for reporting to Microsoft MAPS' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Prevent users
and apps from accessing dangerous websites' is set to 'Enabled: Block'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Scan
removable drives' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L2) Ensure 'Join
Microsoft MAPS' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L2) Ensure 'Configure
Watson events' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Turn on
behavior monitoring' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Disable
OneSettings Downloads' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Allow
clipboard sharing with Windows Sandbox' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Enable file
hash computation feature' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Turn on
script scanning' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Always
install with elevated privileges' is set to 'Disabled' (B)</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Configure
real-time protection and Security Intelligence Updates during OOBE' is set to
'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Scan all
downloaded files and attachments' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Select when
Preview Builds and Feature Updates are received' is set to 'Enabled: 180 or
more days'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Allow
networking in Windows Sandbox' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Configure
Attack Surface Reduction rules: Set the state for each ASR rule' is configured</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Scan packed
executables' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L2) Ensure 'Configure
Brute-Force Protection aggressiveness' is set to 'Enabled: Medium' or higher</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Enable EDR in
block mode' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Turn off
Windows Copilot' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L2) Ensure 'GameInput
Service (GameInputSvc)' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L2) Ensure 'Convert warn
verdict to block' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Trigger a
quick scan after X days without any scans' is set to 'Enabled: 7'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(BL) Ensure 'Interactive
logon: Machine account lockout threshold' is set to '10 or fewer invalid logon
attempts, but not 0'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Control
whether exclusions are visible to local users' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Configure
Remote Encryption Protection Mode' is set to 'Enabled: Audit' or higher</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L2) Ensure 'WinHTTP Web
Proxy Auto-Discovery Service (WinHttpAutoProxySvc)' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L2) Ensure 'Configure how
aggressively Remote Encryption Protection blocks threats' is set to 'Enabled:
Medium' or higher</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Scan excluded
files and directories during quick scans' is set to 'Enabled: 1'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(BL) Ensure 'Require
additional authentication at startup: Allow BitLocker without a compatible TPM'
is set to 'Enabled: False'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(BL) Ensure 'Configure use
of passwords for operating system drives' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Turn off
real-time protection' is set to 'Disabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(BL) Ensure 'Require
additional authentication at startup' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">o<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">(L1) Ensure 'Not allow
per-user unsigned packages to install by default (requires explicitly allow per
install)' is set to 'Enabled'</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 1in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""> </span></p>
<p class="MsoNormal" style="line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;margin:0in;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""> </span></p>
<p class="MsoNormal" style="margin:14pt 0in 0.0001pt 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Both analysis and
remediation checks are included</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Some of the checks allow
you to use the parameterized setting to enable customization for compliance
evaluation. Note that parameterization and remediation actions require the
creation of a custom site.</span></p>
<p class="MsoNormal" style="margin:0in 0in 0in 0.5in;line-height:normal;background-image:initial;background-position:initial;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""> </span></p>
<p class="MsoNormal" style="line-height:normal;margin:0in;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">Actions
to take:</span></b><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue""></span></b></p>
<p class="MsoNormal" style="margin:14pt 0in 14pt 0.5in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:12pt">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman""> </span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">To subscribe to the
above site, you can use the License Overview Dashboard to enable and gather the
site. Note that you must be entitled to the BigFix Compliance product, and you
must be using BigFix version 10 and later</span><span lang="EN" style="font-size:12pt">.</span><span lang="EN" style="font-size:12pt"></span></p>
<p class="MsoNormal" style="margin:6pt 0in 0.0001pt 0.5in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-family:Calibri,sans-serif;color:rgb(5,99,193)">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">If you use custom sites,
update your custom sites accordingly to use the latest content. You can
synchronize your content by using the Synchronize Custom Checks wizard. For
more information, see </span><span lang="EN" style="font-family:Calibri,sans-serif;color:rgb(5,99,193)"></span></p>
<p class="MsoNormal" style="margin:0in 0in 14pt 0.5in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN"><a href="https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html"><span style="font-family:Calibri,sans-serif;color:rgb(5,99,193)">https://help.hcltechsw.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_using_synchronize_custom_checks_wiz.html</span></a></span><u><span lang="EN" style="font-family:Calibri,sans-serif;color:rgb(5,99,193)"></span></u></p>
<p class="MsoNormal" style="line-height:normal;margin:0in;font-size:11pt;font-family:Arial,sans-serif"><b><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">More
information:</span></b><b><span lang="EN" style="font-size:10pt;font-family:Calibri,sans-serif"> </span></b><span lang="EN" style="font-size:10pt;font-family:Calibri,sans-serif"><br>
</span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">To know more about the BigFix Compliance SCM checklists, please
see the following resources:</span><b><span lang="EN" style="font-size:10pt;font-family:Calibri,sans-serif"></span></b></p>
<p class="MsoNormal" style="margin:6pt 0in 0.0001pt 0.5in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-family:Calibri,sans-serif;color:rgb(5,99,193)">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">BigFix Forum:<br>
</span><span lang="EN"><a href="https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fforum.bigfix.com%2Fc%2Frelease-announcements%2Fcompliance&data=05%7C01%7CBigFix-Scrum-Earth%40hcl.com%7C850b19aead5a47f24eb308da841ed642%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C0%7C637967565224681222%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=UYYRYb3SofshREYync5mCc2d5MUGb53t7OjOCBg%2BoJg%3D&reserved=0"><span style="font-family:Calibri,sans-serif;color:rgb(5,99,193)">https://forum.bigfix.com/c/release-announcements/compliance</span></a></span><span lang="EN" style="font-family:Calibri,sans-serif;color:rgb(5,99,193)"></span></p>
<p class="MsoNormal" style="margin:0in 0in 6pt 0.5in;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10pt;font-family:"Times New Roman",serif">●<span style="font-style:normal;font-variant:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size:7pt;line-height:normal;font-family:"Times New Roman"">
</span></span><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">BigFix Compliance SCM
Checklists:</span><span lang="EN" style="font-size:10pt;font-family:Calibri,sans-serif"><br>
</span><span lang="EN"><a href="https://forum.bigfix.com/t/cis-compliance-checklist/54621"><span style="font-family:Calibri,sans-serif">https://forum.bigfix.com/t/cis-compliance-checklist/54621</span></a></span><span lang="EN" style="font-size:10pt;font-family:"Times New Roman",serif"></span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">We hope
you find this latest release of SCM content useful and effective. Thank you!</span><span lang="EN" style="font-size:10.5pt;font-family:Calibri,sans-serif"></span></p>
<p class="MsoNormal" style="margin:0in 0in 12pt;line-height:normal;font-size:11pt;font-family:Arial,sans-serif"><i><span lang="EN" style="font-size:10.5pt;font-family:"Helvetica Neue"">– The
BigFix Compliance team</span></i><i><span lang="EN" style="font-size:10pt;font-family:Calibri,sans-serif"></span></i></p></div>