Endpoint Security: Windows 10 and Windows 11

Users throughout an organization typically interact with company resources by using a computer that we refer to as an endpoint. Endpoints, including laptops, desktops, and servers, are often the primary targets for cyber attackers looking to impact business operations for their gain. As an IT auditor, it is a foundational skill to understand the security features and best practices for securing endpoints, especially those running the most widely used Operating Systems (OSs): Windows 10 and Windows 11.

Windows 10, released in 2015, has been the dominant OS for personal computers and enterprise workstations. Windows 10 will lose vendor support in 2025 and should be replaced by Windows 11, which was launched in 2021 and builds upon the security foundation of Windows 10 while introducing new features and enhancements. Both versions offer a range of built-in security tools and configurations which, when properly implemented and audited, can...