Compliance and Governance User Guide

Overview

This DEX Pack Lite displays compliance and governance information, such as whether systems have been updated and whether they adhere to security standards.

NOTE: BitLocker collection requires 10.12 agent or later for complete data.

Value Proposition

This feature offers a high-level overview of your estate’s security posture and compliance with current specifications. You can start by reviewing the Compliance section to get a comprehensive summary, then drill down into specific DEX Packs for detailed insights. For instance, you might start at Compliance and then dive deeper into the BIOS DEX Pack, the BitLocker DEX Pack, or other relevant items.

From there, you can select a specific channel and assess whether any actions are needed, such as addressing systems running Windows 10 Pro or Windows 11 Pro that should be upgraded to Enterprise versions. This structured approach helps you identify potential risks and ensures your systems meet necessary security and compliance standards.

Global Filters

In the Global Filters section, you can select a group by which to limit the data that appears in the other sections on the page. The default for Group is All Systems.

BitLocker Encryption

This section shows a chart of the number of systems that report their BitLocker encryption as Fully Encrypted, Fully Decrypted, or No Data.

The query only targets the primary disk (C:).

TIP: In this section and all the following sections of this DEX Pack Lite, you can select one of these two options:

Do not pass selection to Systems table: When you select this option and then click a bar in the section, the table in the Systems section is not filtered to show the data that you clicked.
Pass selection to Systems table: When you select this option and then click a bar in the section, the table in the Systems section is filtered to show the data that you clicked.

Hover over a bar in the chart to see exact numbers.

Antivirus

This section shows a chart of the number of systems that are running antivirus software such as Windows Defender, Carbon Black Cloud, etc. It also shows how many systems are not running any antivirus software.

Hover over a bar in the chart to see exact numbers.

Firewall

This section shows a chart of the number of systems that are running firewall software such as Windows Firewall, McAfee, etc. It also shows how many systems are not running any firewall software.

Hover over a bar in the chart to see exact numbers.

Network Connection Type

This chart shows the number of systems that have used each network type; secured or unsecured wireless, and wired. A system is included in the number if it has used that type of network in the last 30 days.

Hover over a bar in the chart to see exact numbers.

BIOS

This section shows a chart of the number of systems that have had their last BIOS update within the last year, one to two years, two to three years, or more than three years.

Hover over a bar in the chart to see exact numbers.

Windows OS Edition

This section shows a chart of the number of systems that are running various Windows OS Editions, such as 11 Enterprise, 10 Enterprise, 10 Home, etc.

Hover over a bar in the chart to see exact numbers.

Windows OS Builds

This section shows a chart of the number of systems that are running various Windows OS Builds, by build number.

Hover over a bar in the chart to see exact numbers.

Systems

This section provides a table view of all the data that appears in the charts in other sections of the page. The table shows all the systems that you have selected to display. For each system, the table shows:

Column Name	Description
OS	Currently installed operating system.
OS Build Number	Build version of the system OS.
Last BIOS Update	Most recent record of BIOS inventory change.
BitLocker Protection Status	Indicates whether the primary disk (C:) and its encryption key (if any) are secured.
BitLocker Conversion Status	Indicates the status of the encryption or decryption of the primary disk (C:).
BitLocker Encryption Method	Indicates the encryption algorithm and key size used on the primary disk (C:).
Antivirus	AV products on the system, if it is running and if it is updated.
Firewall	Firewall products on the system, if it is running and if it is updated.
Secure Wireless	The system has used a secure wireless connection in the last 30 days.
Unsecured Wireless	The system has used an unsecure wireless connection in the last 30 days.
Wired	The system has used a wired network connection in the last 30 days.