Document Details

The documentation demonstrates a moderate Windows bias. In several policy tables, Windows-specific policies (such as auditing Windows Administrators group membership or password policies) are present without equivalent Linux-focused policies. Where both Windows and Linux policies exist, Windows policies are often listed before Linux ones. There are more granular and numerous Windows-specific controls (e.g., password complexity, minimum/maximum age, encryption settings) compared to Linux, which is only covered by a few generic policies (e.g., passwordless accounts, passwd file permissions). Additionally, some policy descriptions and controls reference Windows tools or concepts (like the 'Administrators group') without Linux equivalents or guidance.