CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Impact:

If 4 - Auto download and schedule the install isselected in Rule 18.9.102.2, critical operating system updates and service packs will automatically download every day (at 3:00 A.M., by default).

Default Value:

Not Defined. (Since the default value of Configure Automatic Updates is 3 - Auto download and notify for install , this setting is not applicable by default.)

References:

1. CCE-35111-4

CIS Controls:

Version 6

4.5 Use Automated Patch Management And Software Update Tools Deploy automated patch management tools and software update tools for operating system and software/applications on all systems for which such tools are available and safe. Patches should be applied to all systems, even systems that are properly air gapped.

Version 7

3.4 Deploy Automated Operating System Patch Management Tools Deploy automated software update tools in order to ensure that the operating systems are running the most recent security updates provided by the software vendor. 3.5 Deploy Automated Software Patch Management Tools Deploy automated software update tools in order to ensure that third-party software on all systems is running the most recent security updates provided by the software vendor.

1186 | P a g e