2.4 Worker Process Identities - 'AppPoolIdentityType = SYSTEM,LOCAL SERVICE,NETWORK SERVICE, or SPECIFIC USER'
Information
Applications that use worker process identities have a reduced attack surface when an application has been compromised because they have a limited set of privileges and permissions.
Solution
Make sure 'Worker Process Identities' is set to SYSTEM,LOCAL SERVICE,NETWORK SERVICE, or SPECIFIC USER