BSI-100-2: S 2.327: Secure remote access under Windows XP, Windows Vista and Windows 7: Automatically log off users when logon time expires

800-53|AC-12

CSCv6|16

CSCv6|16.4

BSI-100-2: S 2.327: Secure remote access under Windows XP, Windows Vista and Windows 7: Remote Assistance (Get Help)

800-53|AC-17

CSCv6|5.1

BSI-100-2: S 2.327: Secure remote access under Windows XP, Windows Vista and Windows 7: Remote Assistance (Unsolicited)

CSCv6|9.1

BSI-100-2: S 4.2: Screen lock: Automatic screen lock after a period of no user inputs

800-53|AC-11

CSCv6|16.5

BSI-100-2: S 4.3: Use of virus protection programs: Periodic runs of a virus protection program

800-53|SI-3

BSI-100-2: S 4.4: Correct handling of drives for removable media and external data storage: Allow to eject removable NTFS media

800-53|MP-2

CSCv6|8.3

BSI-100-2: S 4.15: Secure log-in: Message for users wanting to log on (Undefined)

800-53|AC-8

BSI-100-2: S 4.15: Secure log-in: Message title for users wanting to log on (Undefined)

BSI-100-2: S 4.29: Use of an encryption product for portable IT systems

800-53|SC-13

BSI-100-2: S 4.31: Ensuring power supply during mobile use

800-53|AC-19

BSI-100-2: S 4.48: Password protection under Windows systems: Account lockout duration = 60

800-53|AC-7

CSCv6|16.7

BSI-100-2: S 4.48: Password protection under Windows systems: Account lockout threshold = 3

BSI-100-2: S 4.48: Password protection under Windows systems: Automatic login

800-53|AC-6(10)

BSI-100-2: S 4.48: Password protection under Windows systems: Disable reversible encryption for stored passwords

800-53|IA-5(1)

CSCv6|16.13

CSCv6|16.14

BSI-100-2: S 4.48: Password protection under Windows systems: Maximum Password Age = 90 days

BSI-100-2: S 4.48: Password protection under Windows systems: Minimum Password Age = 1 day

BSI-100-2: S 4.48: Password protection under Windows systems: Minimum password length = 8 characters

CSCv6|5.7

CSCv6|16.2

BSI-100-2: S 4.48: Password protection under Windows systems: Password History >= 6

BSI-100-2: S 4.48: Password protection under Windows systems: Passwords must meet complexity requirements

BSI-100-2: S 4.48: Password protection under Windows systems: Reset account lockout = 30 minutes

BSI-100-2: S 4.57: Disabling automatic CD-ROM recognition

800-53|SC-18(4)

BSI-100-2: S 4.79: Secure access mechanisms for local administration: Automatic admin account recovery console logon (Disabled)

BSI-100-2: S 4.81: Auditing and logging of activities in a network: Remote assistance (Enabled)

800-53|AU-12

BSI-100-2: S 4.101: Firewalls and encryption: Data should always be encrypted before it is sent if at all possible

800-53|SC-7(12)

BSI-100-2: S 4.200: Handling of USB storage media: It is possible to prevent the device driver for USB storage media from starting up

800-53|CM-7

BSI-100-2: S 4.200: Handling of USB storage media: USB storage media need to be handled in exactly the same way as conventional media

BSI-100-2: S 4.237: Secure basic configuration of IT systems: Access this computer from the network

800-53|AC-6(7)

CSCv6|9

BSI-100-2: S 4.244: Secure configuration of Windows client operating systems: Application-specific policies - Messenger

800-53|CM-6

BSI-100-2: S 4.244: Secure configuration of Windows client operating systems: Application-specific policies - Telnet Client

BSI-100-2: S 4.244: Secure configuration of Windows client operating systems: Application-specific policies - UPNP

BSI-100-2: S 4.244: Secure configuration of Windows client operating systems: Application-specific policies - Wireless Zero Config

BSI-100-2: S 4.244: Secure configuration of Windows client operating systems: Disable CTRL+ALT+DEL request on login (Disabled)

CSCv6|3.1

CSCv6|8

BSI-100-2: S 4.244: Secure configuration of Windows client operating systems: Do not show last user name in login dialog (Enabled)

CSCv6|13

BSI-100-2: S 4.249: Use of virus protection programs: Keeping Windows client systems up to date: Updating methods

800-53|SI-2(5)

CSCv6|4.5

BSI-100-2: S 4.284: Handling of services under Windows Server 2003 and higher: Logon as a service (Undefined)

BSI-100-2: S 4.305: Use of storage restrictions (storage quotas): Increase quotas (Administrators)

BSI-100-2: S 4.344: Monitoring of Windows Vista, Windows 7 and Windows Server 2008 systems: Audit account logon events (Success, Failure)

BSI-100-2: S 4.344: Monitoring of Windows Vista, Windows 7 and Windows Server 2008 systems: Audit account management (Success, Failure)

BSI-100-2: S 4.344: Monitoring of Windows Vista, Windows 7 and Windows Server 2008 systems: Audit logon events (Success, Failure)

BSI-100-2: S 4.344: Monitoring of Windows Vista, Windows 7 and Windows Server 2008 systems: Audit object access (Failure)

BSI-100-2: S 4.344: Monitoring of Windows Vista, Windows 7 and Windows Server 2008 systems: Audit policy change (Success, Failure)

BSI-100-2: S 4.344: Monitoring of Windows Vista, Windows 7 and Windows Server 2008 systems: Audit privilege use (Failure)

BSI-100-2: S 4.344: Monitoring of Windows Vista, Windows 7 and Windows Server 2008 systems: Audit process tracking (No auditing)

BSI-100-2: S 4.344: Monitoring of Windows Vista, Windows 7 and Windows Server 2008 systems: Audit system events (Success, Failure)

BSI-100-2: S 4.344: Monitoring of Windows Vista, Windows 7 and Windows Server 2008 systems: Maximum size of application log

800-53|AU-4

CSCv6|6.3

BSI-100-2: S 4.344: Monitoring of Windows Vista, Windows 7 and Windows Server 2008 systems: Maximum size of security log

BSI-100-2: S 4.344: Monitoring of Windows Vista, Windows 7 and Windows Server 2008 systems: Maximum size of system log

BSI-100-2: S 4.344: Monitoring of Windows Vista, Windows 7 and Windows Server 2008 systems: Retain application log for (Undefined)

800-53|AU-11

BSI-100-2: S 4.344: Monitoring of Windows Vista, Windows 7 and Windows Server 2008 systems: Retain security log for (Undefined)

BSI-100-2: S 4.344: Monitoring of Windows Vista, Windows 7 and Windows Server 2008 systems: Shut down system when max. security log size

800-53|AU-5(4)

CSCv6|6

BSI-100-2: S 4.432: Secure configuration of server applications: Act as part of the operating system (Defined, but empty)

BSI-100-2: S 4.432: Secure configuration of server applications: Back up files and directories (Backup operators)

BSI-100-2: S 4.432: Secure configuration of server applications: Bypass traverse checking (Everyone)

BSI-100-2: S 4.432: Secure configuration of server applications: Change the system time (Administrators)

BSI-100-2: S 4.432: Secure configuration of server applications: Create a pagefile (Administrators)

BSI-100-2: S 4.432: Secure configuration of server applications: Create a token object (Defined, but empty)

BSI-100-2: S 4.432: Secure configuration of server applications: Create permanent shared objects (Defined, but empty)

BSI-100-2: S 4.432: Secure configuration of server applications: Debug programs (Undefined)

BSI-100-2: S 4.432: Secure configuration of server applications: Deny log on locally (Undefined)

BSI-100-2: S 4.432: Secure configuration of server applications: Enable accounts to be trusted for delegation (Administrators)

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - Alerter

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - AppMgr

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - Appmon

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - BINLSVC

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - Browser

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - CiSvc

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - ClipSrv

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - FAX

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - Helpsvc

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - HTTPFilter

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - IISADMIN

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - LicenseService

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - MacFile

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - MacPrint

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - Messenger

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - mnmsrvc

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - MSFtpsvc

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - Netman

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - NntpSvc

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - Ntfrs

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - NWCWorkstation

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - Pop3Svc

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - RasAuto

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - RasMan

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - Remote_Storage_Server

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - Remote_Storage_User_Link

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - RemoteAccess

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - RemoteRegistry

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - RpcLocator

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - Schedule

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - SharedAccess

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - SMTPSVC

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - SNMP

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - SNMPTRAP

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - Spooler

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - srvcsurg

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - TapiSrv

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - TemService

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - TFTPD

BSI-100-2: S 4.432: Secure configuration of server applications: Enable only necessary services - TlntSvr

Detections

Analytics

Revision 1.4

Mar 4, 2019

Functional Update

Miscellaneous