Item Search

NameAudit NamePluginCategory
18.9.11.1.2 (BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.1.3 (BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.1.4 (BL) Ensure 'Choose how BL-protected fixed drives can be recovered: Recovery Password' is set to 'Enabled: Allow 48CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.1.5 (BL) Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Recovery Key' is set to 'Enabled: Allow 256-bit'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.1.6 (BL) Ensure 'Choose how fixed drives can be recovered: Omit recovery options from the BL setup wizard' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.1.6 Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 BLWindows
18.9.11.1.6 Ensure 'Choose how fixed drives can be recovered: Omit recovery options from the BL setup wizard' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.1.7 (BL) Ensure 'Save BitLocker recovery information to AD DS for fixed data drives' is set to 'Enabled: False'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.1.7 Ensure 'Choose how BitLocker-protected fixed drives can be recovered: Save BitLocker recovery information to AD DS for fixed data drives' is set to 'Enabled: False'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 BLWindows
18.9.11.1.7 Ensure 'Save BitLocker recovery information to AD DS for fixed data drives' is set to 'Enabled: False'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.1.8 (BL) Ensure 'Configure storage of BL recovery info to AD DS' is set to 'Enabled: Backup recovery passwords and key packages'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.1.8 Ensure 'Configure storage of BL recovery info to AD DS' is set to 'Enabled: Backup recovery passwords and key packages'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.1.9 (BL) Ensure 'Do not enable BL until recovery information is stored to AD DS for fixed data drives' is set to 'Enabled: False'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.1.9 Ensure 'Do not enable BL until recovery information is stored to AD DS for fixed data drives' is set to 'Enabled: False'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.2.3 (BL) Ensure 'Choose how BitLocker-protected operating system drives can be recovered' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.2.4 (BL) Ensure 'Allow data recovery agent' is set to 'Enabled: False'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.2.4 Ensure 'Allow data recovery agent' is set to 'Enabled: False'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.2.5 (BL) Ensure 'Choose how BL-protected OS drives can be recovered: Recovery Password' is set to 'Enabled: Require 48-digit'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.2.5 Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Recovery Password' is set to 'Enabled: Require 48-digit recovery password'CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 BLWindows
18.9.11.2.5 Ensure 'Choose how BL-protected OS drives can be recovered: Recovery Password' is set to 'Enabled: Require 48-digit'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.2.6 (BL) Ensure 'Choose how BitLocker-protected OS drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.2.6 Ensure 'Choose how BitLocker-protected OS drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.2.7 (BL) Ensure 'Omit recovery options from the BL setup wizard' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.2.7 Ensure 'Omit recovery options from the BL setup wizard' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.2.8 (BL) Ensure 'Save BitLocker recovery information to AD DS for operating system drives' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.2.8 Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 BLWindows
18.9.11.2.8 Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Save BitLocker recovery information to AD DS for operating system drives' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 BLWindows
18.9.11.2.8 Ensure 'Save BitLocker recovery information to AD DS for operating system drives' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.2.9 (BL) Ensure 'Configure storage of BitLocker recovery information to AD DS:' is setCIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.2.9 Ensure 'Choose how BitLocker-protected operating system drives can be recovered: Configure storage of BitLocker recovery information to AD DS:' is set to 'Enabled: Store recovery passwords and key packages'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 BLWindows
18.9.11.2.9 Ensure 'Configure storage of BL recovery info to AD DS:' is set to 'Enabled: Store recovery passwords and key packages'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.2.10 (BL) Ensure 'Do not enable BitLocker until recovery information is stored to AD DS for operating system drives' is setCIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.2.10 Ensure 'Do not enable BL until recovery info is stored to AD DS for operating system drives' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.3.2 (BL) Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.3.2 Ensure 'Choose how BitLocker-protected removable drives can be recovered' is set to 'Enabled'CIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 BLWindows
18.9.11.3.3 (BL) Ensure 'Allow data recovery agent' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.3.3 Ensure 'Allow data recovery agent' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.3.3 Ensure 'Choose how BitLocker-protected removable drives can be recovered: Allow data recovery agent' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 BLWindows
18.9.11.3.5 (BL) Ensure 'Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.3.5 Ensure 'Choose how BitLocker-protected removable drives can be recovered: Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 BLWindows
18.9.11.3.5 Ensure 'Recovery Key' is set to 'Enabled: Do not allow 256-bit recovery key'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.3.6 (BL) Ensure 'Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.3.6 Ensure 'Omit recovery options from the BitLocker setup wizard' is set to 'Enabled: True'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.3.7 (BL) Ensure 'Save BitLocker recovery information to AD DS for removable data drives' is set to 'Enabled: False'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.3.7 Ensure 'Choose how BitLocker-protected removable drives can be recovered: Save BitLocker recovery information to AD DS for removable data drives' is set to 'Enabled: False'CIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 BLWindows
18.9.11.3.7 Ensure 'Save BitLocker recovery information to AD DS for removable data drives' is set to 'Enabled: False'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.3.8 (BL) Ensure 'Configure storage of BL recovery information to AD DS:' is set to 'Enabled: Backup recovery pws and key packages'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.3.8 Ensure 'Configure storage of BL recovery information to AD DS:' is set to 'Enabled: Backup recovery pws and key packages'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows
18.9.11.3.9 (BL) Ensure 'Do not enable BL until recovery info is stored to AD DS for removable data drives' is set to 'Enabled: False'CIS Microsoft Windows 10 Enterprise (Release 1607) v1.2.0 Level 1 BitlockerWindows
18.9.11.3.9 Ensure 'Do not enable BL until recovery info is stored to AD DS for removable data drives' is set to 'Enabled: False'CIS Microsoft Windows 10 Enterprise (Release 1709) v1.4.0 BitlockerWindows