 User account creation, deletion, and modification

tracking

 User logon/ logoff tracking

 Least privilege file and account access

 Necessary system services running in non-admin

accounts where possible

 Security patches from software suppliers,

including Microsoft, with patch status reporting

 Anti-virus software, including malware protection

supported as well as Anti-Spyware software

support

Workstation platform hardening supports:

 Unnecessary services, software, and programs

removed

 Unneeded software ports disabled

 Optional host intrusion prevention to protect the

use of software ports that may be used,

depending on the software configuration

 Documentation on how to re-enable services and

ports where required by special circumstances

 Secure BIOS changes

Installation Considerations

These new security enhancements are supported

only on Microsoft Windows 7 and Windows Server

2008 R2 stations which support the control network

and require a software update to the latest Foxboro

Evo software release to obtain these security

features. The security enhancements can be

deployed on a subset of workstations to increase

security, but in order to maximize security protection,

all workstations need to be updated to the latest

software release to obtain the full benefits