diff --git a/controls/anssi.yml b/controls/anssi.yml index 1570a439f0f..2aed8f1cf41 100644 --- a/controls/anssi.yml +++ b/controls/anssi.yml @@ -124,7 +124,14 @@ controls: - id: R9 level: intermediary title: Hardware configuration - # rules: TBD + notes: >- + Configurations recommended for this requirement are to be performed at the BIOS level. + The content automation cannot really configure the BIOS, but can in some cases, + check settings that are visible to the OS. Like for example the NX/DX setting. + rules: + - sysctl_kernel_exec_shield + - bios_enable_execution_restrictions + - install_PAE_kernel_on_x86-32 - id: R10 level: intermediary