Detections
Analytics

98.2 Ensure 'Facial Features Use Enhanced Anti Spoofing' is set to 'true'

Information

This policy setting determines whether enhanced anti-spoofing is configured for devices which support it.

The recommended state for this setting is: true.

Enterprise managed environments are now supporting a wider range of mobile devices, increasing the security on these devices will help protect against unauthorized access on your network.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to true.

Windows Hello For Business\Facial Features Use Enhanced Anti Spoofing

Impact:

Windows will require all users on the device to use anti-spoofing for facial features, on devices which support it.

See Also

https://workbench.cisecurity.org/benchmarks/27282

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SC-39, 800-53|SI-16, CSCv7|8.3

Plugin: Windows

Control ID: 96fbb618e11ffc8d796b272f1a97c0e9b9d7a82d40425612e0e64ca9eb13e48d