Compliance — Device Security

Win - OIB - Compliance - U - Device Security - v3.1

CMMC Control Mapping Matrix

Name	Value
Basics
Name	Win - OIB - Compliance - U - Device Security - v3.1
Description
Profile type	Compliance policy
Platform supported	Windows 10 and later
Scope tags	Default

Table 1. Basics - Win - OIB - Compliance - U - Device Security - v3.1

Name	Value
Compliance Settings
Password Required	No
Password Block Simple	No
Password Required To Unlock From Idle	No
Password Required Type	deviceDefault
Require Healthy Device Report	No
Early Launch Anti Malware Driver Enabled	No
BitLocker Enabled	No
Secure Boot Enabled	No
Code Integrity Enabled	No
Memory Integrity Enabled	No
Kernel DMA Protection Enabled	No
Virtualization Based Security Enabled	No
Firmware Protection Enabled	No
Storage Require Encryption	No
Active Firewall Required	Yes
Defender Enabled	No
Signature Out Of Date	No
RTP Enabled	No
Antivirus Required	Yes
Anti Spyware Required	Yes
Device Threat Protection Enabled	No
Device Threat Protection Required Security Level	unavailable
Configuration Manager Compliance Required	No
TPM Required	Yes

Table 2. Compliance Settings - Win - OIB - Compliance - U - Device Security - v3.1