Endpoint Security: Windows 10 and Windows 11

Users throughout an organization typically interact with company resources by using a computer that we refer to as an endpoint. Endpoints, including laptops, desktops, and servers, are often the primary targets for cyber attackers looking to impact business operations for their gain. As an IT auditor, it is a foundational skill to understand the security features and best practices for securing endpoints, especially those running the most widely used Operating Systems (OSs): Windows 10 and Windows 11.

Windows 10, released in 2015, has been the dominant OS for personal computers and enterprise workstations. Windows 10 will lose vendor support in 2025 and should be replaced by Windows 11, which was launched in 2021 and builds upon the security foundation of Windows 10 while introducing new features and enhancements. Both versions offer a range of built-in security tools and configurations which, when properly implemented and audited, can significantly reduce the risk of cyber incidents and data breaches.

This chapter provides an introductory understanding of Windows 10 and Windows 11 endpoint security to help inform your audits. We will explore the key security features that these OSs offer, including Microsoft Defender Antivirus, Windows Firewall, and BitLocker encryption. You will learn how to effectively configure, monitor, and audit these features to ensure that they function as intended and align with your organization’s security policies.

Throughout the chapter, we will compare and contrast the security implementations between Windows 10 and Windows 11, highlighting any significant differences or improvements.

By the end of this chapter, you will have gained key knowledge and skills.

This chapter covers the following topics:

• Security features in Windows 10 and 11
• Auditing Microsoft Defender in Windows 10 and 11
• Evaluating Windows Firewall across both versions
• BitLocker and data encryption in Windows 10 and 11

Whether you are new to IT auditing or looking to expand your knowledge of endpoint security, this chapter will provide you with the foundation needed to confidently navigate the security landscape of Windows 10 and Windows 11.