Compliance — Defender for Endpoint

Win - OIB - Compliance - U - Defender for Endpoint - v3.1

CMMC Control Mapping Matrix

Name	Value
Basics
Name	Win - OIB - Compliance - U - Defender for Endpoint - v3.1
Description
Profile type	Compliance policy
Platform supported	Windows 10 and later
Scope tags	Default

Table 1. Basics - Win - OIB - Compliance - U - Defender for Endpoint - v3.1

Name	Value
Compliance Settings
Password Required	No
Password Block Simple	No
Password Required To Unlock From Idle	No
Password Required Type	deviceDefault
Require Healthy Device Report	No
Early Launch Anti Malware Driver Enabled	No
BitLocker Enabled	No
Secure Boot Enabled	No
Code Integrity Enabled	No
Memory Integrity Enabled	No
Kernel DMA Protection Enabled	No
Virtualization Based Security Enabled	No
Firmware Protection Enabled	No
Storage Require Encryption	No
Active Firewall Required	No
Defender Enabled	Yes
Signature Out Of Date	Yes
RTP Enabled	Yes
Antivirus Required	No
Anti Spyware Required	No
Device Threat Protection Enabled	No
Device Threat Protection Required Security Level	unavailable
Configuration Manager Compliance Required	No
TPM Required	No

Table 2. Compliance Settings - Win - OIB - Compliance - U - Defender for Endpoint - v3.1