IBM BigFix Compliance UPDATE: USGCB Checklist for Windows 7 (site ver 14) published 2016-12-01

IBM BigFix Compliance

Updated Security Configuration Management (SCM) USGCB Checklist for Windows 7 with 8 new checks added from benchmark ver V2.0.5.1

Security Benchmark:
USGCB Checklist for Windows 7 Benchmark, V1.2.1.0 (with 8 new checks from Benchmark V2.0.5.1)

Published Site:
USGCB Checklist for Windows 7, site version 14
(The site version is provided for air-gap customers.)

Actions to take:

  • To subscribe to the above site, you can use the License Overview Dashboard to enable and gather the site. Note that you must be entitled to the BigiFix Compliance product and you must be using IBM BigFix version 9.2 and later.


  • The original USGCB Checklist for Windows 7 is extended with 8 new checks based on a newer version of Benchmark to satisfy some customers’ specific requirements.
  • Both analysis and remediation checks are included
  • Some of the checks allow you to use the parameterized setting to enable customization for compliance evaluation. Note that parameterization and remediation actions require the creation of a custom site.

These 8 checks are added from benchmark version V2.0.5.1

  • enable_screen_saver
  • password_protect_the_screen_saver
  • screen_saver_timeout
  • turn_off_help_ratings
  • do_not_preserve_zone_information_in_the_attachments
  • hide_mechanisms_to_remove_zone
  • notify_antivirus_programs_when_opening_attachments
  • prevent_users_from_sharing_files_within_their_profile

To know more about IBM BigFix Compliance SCM checklists, please see

We hope you find this latest release of SCM content useful and effective. Thank you! – The IBM BigFix Compliance team