Document Details

The documentation shows a moderate Windows bias. While some controls mention Linux (e.g., auditing Linux VM password files and accounts), Windows-specific controls and audit items are more detailed and numerous, especially regarding password policies and complexity. There are explicit audit items for Windows VMs (e.g., password complexity, password age, password history), but equivalent Linux controls are either missing or less detailed. Additionally, Windows terminology and tools (such as Windows VMs and their password policies) are mentioned without always providing Linux equivalents or parity in coverage.