CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

CIS Controls:

Version 6

5.7 User Accounts Shall Use Long Passwords Where multi-factor authentication is not supported, user accounts shall be required to use long passwords on the system (longer than 14 characters). 16.2 All Accounts Have A Monitored Expiration Date Ensure that all accounts have an expiration date that is monitored and enforced. 16.5 Ensure Workstation Screen Locks Are Configured Configure screen locks on systems to limit access to unattended workstations. 16.2 Configure Centralized Point of Authentication Configure access for all accounts through as few centralized points of authentication as possible, including network, security, and cloud systems. 16.5 Encrypt Transmittal of Username and Authentication Credentials Ensure that all account usernames and authentication credentials are transmitted across networks using encrypted channels. Version 7

57 | P a g e