| 1.4.1 Ensure 'Allow read access via the File System API on these sites' is set to 'Disabled' | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.4.2 Ensure 'Choose whether users can receive customized background images and text, suggestions, notifications, and tips for Microsoft services' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.4.4 Ensure 'Control use of JavaScript JIT' is set to 'Enabled: Do not allow any site to run JavaScript JIT' | SYSTEM AND INFORMATION INTEGRITY |
| 1.4.5 Ensure 'Control use of the File System API for reading' is set to 'Enabled: Don't allow any site to request read access to files and directories via the File System API' | CONFIGURATION MANAGEMENT |
| 1.4.7 Ensure 'Control use of the Web Bluetooth API' is set to 'Enabled: Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API' | CONFIGURATION MANAGEMENT |
| 1.4.8 Ensure 'Control use of the WebHID API' is set to 'Enabled: Do not allow any site to request access to HID devices via the WebHID API' | CONFIGURATION MANAGEMENT |
| 1.4.11 Ensure 'Default idle detection setting' is set to 'Enabled: Do not allow any site to detect the user's idle state' or 'Enabled: Ask every time a site wants to detect the user's idle state' | CONFIGURATION MANAGEMENT |
| 1.11.2 Ensure 'Configure extension management settings' is set to 'Enabled: { '*': {'installation_mode': 'blocked' }}' | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.14.3 Ensure 'Supported authentication schemes' is set to 'Enabled: negotiate' | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.39 Ensure 'Allow features to download assets from the Asset Delivery Service' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.40 Ensure 'Allow file selection dialogs' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.50 Ensure 'Allow or block audio capture' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.51 Ensure 'Allow or block video capture' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.52 Ensure 'Allow or deny screen capture' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.58 Ensure 'Allow unconfigured sites to be reloaded in Internet Explorer mode' is set to 'Disabled' | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.60 Ensure 'Allow users to open files using the ClickOnce protocol' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.61 Ensure 'Allow users to open files using the DirectInvoke protocol' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.62 Ensure 'Allow users to proceed from the HTTPS warning page' is set to 'Disabled' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.65 Ensure 'AutoLaunch Protocols Component Enabled' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.68 Ensure 'Block third party cookies' is set to 'Enabled' | CONFIGURATION MANAGEMENT |
| 1.70 Ensure 'Browser sign-in settings' is set to 'Enabled: Disable browser sign-in' | CONFIGURATION MANAGEMENT |
| 1.76 Ensure 'Configure Online Text To Speech' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.77 Ensure 'Configure Speech Recognition' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.83 Ensure 'Control use of the Headless Mode' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.84 Ensure 'Control use of the Serial API' is set to 'Enable: Do not allow any site to request access to serial ports via the Serial API' | CONFIGURATION MANAGEMENT |
| 1.86 Ensure 'Controls the availability of browsing with Copilot in Microsoft Edge' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.87 Ensure 'Default sensors setting' is set to 'Enabled: Do not allow any site to access sensors' | CONFIGURATION MANAGEMENT |
| 1.100 Ensure 'Enable Copilot address bar suggestions' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.102 Ensure 'Enable Drop feature in Microsoft Edge' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.104 Ensure 'Enable guest mode' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.106 Ensure 'Enable Process Isolation' is set to 'Enabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.108 Ensure 'Enable QR Code Generator' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.110 Ensure 'Enable search suggestions' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.112 Ensure 'Enable service-based extraction for Reading Mode in Microsoft Edge' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.118 Ensure 'Enable Translate' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.121 Ensure 'Enable User Web App Install From Browser' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.124 Ensure 'Enforce Bing SafeSearch' is set to 'Enabled: Configure moderate search restrictions in Bing' | CONFIGURATION MANAGEMENT |
| 1.125 Ensure 'Enforce Google SafeSearch' is set to 'Enabled' | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.127 Ensure 'Enhanced Security Mode configuration for Intranet zone sites' is set to 'Disabled' | SYSTEM AND INFORMATION INTEGRITY |
| 1.130 Ensure 'Live captions allowed' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.136 Ensure 'Show an 'Always open' checkbox in external protocol dialog' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.140 Ensure 'Specify if online OCSP/CRL checks are required for local trust anchors' is set to 'Enabled' | CONFIGURATION MANAGEMENT |
| 1.141 Ensure 'Spell checking provided by Microsoft Editor' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| 1.145 Ensure 'Text prediction enabled by default' is set to 'Disabled' | CONFIGURATION MANAGEMENT |
| CIS_Microsoft_Edge_v5.0.0_L2.audit from CIS Microsoft Edge v5.0.0 | |