ISM-1492

Operating system exploit protection functionality is enabled.

Topic
Hardening operating system configurations
Applicable to
all

History

Priority
Must
Mar 2022
Operating system exploit protection functionality is enabled.
The recommendation to implement Microsoft exploit protection functionality has been expanded to cover exploit protection functionality that may exist in any operating system.
Nov 2018
If supported, Microsoft’s ‘Exploit protection’ functionality is implemented on workstations and servers.
Added to address a gap in guidance on the use of exploit protection functionality in modern operating systems that no longer support the use of EMET.