CCS Express SCU 2026-2 Release

Products

• Control Compliance Suite Standards Server
• Control Compliance Suite
• Control Compliance Suite Standards Module

Issue/Introduction

Express SCU 2026-2 has been released for Control Compliance Suite

Resolution

About this Express Security Content Update

Overview

An Express Security Content Update (Express SCU) is an out-of-band content update that is complementary to
the periodic Security Content Updates on Symantec Control Compliance Suite (CCS) 12.7 or later. With an
easy-to-install setup and an ad-hoc availability of a particular CCS predefined technical standard, Express
SCU is an easy way of installing the required Content platform updates for CCS. Every Express SCU is
integrated with the subsequent SCU release.

Intended Audience

This Express SCU is applicable only to users that are running one of the following SCU versions:
● For CCS 12.7:
○ SCU version required for this Express SCU: SCU 2024-2 or SCU 2025-1.
● For CCS 12.8:
○ SCU version required for this Express SCU: 2025-1.

Contents of this Express Security Content Update

This Express SCU provides the latest version of the following CCS predefined technical standards:

Unix:
● CIS Ubuntu Linux 22.04 LTS Benchmark v3.0.0 Level 1
● CIS Ubuntu Linux 22.04 LTS Benchmark v3.0.0 Level 2

Windows:
● CIS Microsoft Windows Server 2019 Benchmark v4.0.0 Level 1
● CIS Microsoft Windows Server 2019 Benchmark v4.0.0 Level 2
● CIS Microsoft Windows Server 2019 Benchmark v4.0.0 - Next Generation Windows Security

● CIS Microsoft Windows 11 Enterprise Benchmark v4.0.0 Level 1
● CIS Microsoft Windows 11 Enterprise Benchmark v4.0.0 Level 2
● CIS Microsoft Windows 11 Enterprise Benchmark v4.0.0 BitLocker

● CIS Microsoft Windows 10 Enterprise Benchmark v4.0.0 Level 1
● CIS Microsoft Windows 10 Enterprise Benchmark v4.0.0 Level 2
● CIS Microsoft Windows 10 Enterprise Benchmark v4.0.0 BitLocker

Using these latest technical standards, you can assess the security compliance posture of Ubuntu Linux 22.04
LTS machines, Microsoft Windows Server 2019, Microsoft Windows 11 Enterprise, and Microsoft Windows 10
Enterprise devices in your environment.

Note:
Control Compliance Suite (CCS) CIS standards include only those checks identified as Automated in the
corresponding CIS Benchmarks. Recommendations categorized as Manual in the CIS Benchmarks are not
included in the CCS CIS standards.

For details on Manual recommendations, refer to the document “Manual Recommendations in CIS Standards
for Express Security Content Update 2026-2.”

Installing this Express Security Content Update
This Express SCU includes an installer file, CCS_ExpressSCU_2026-2_Win.exe. Use this installer file to install the latest version of the CCS predefined technical standards, which are listed in the preceding section.
This installer needs to be run manually only on the CCS Application Server.

Prerequisites
The following are the prerequisites to install this Express SCU:

● For the CCS 12.7 version: Security Content Update 2024-2 or 2025-1 is installed.
● For the CCS 12.8 version: Security Content Update 2025-1 is installed.
● Control Compliance Suite 12.7 or later is installed.
● Ensure that the user has the Control Compliance Suite administrator and local administrator privileges.
● Ensure that the following jobs are NOT running on the Control Compliance Suite Application Server:
○ Data collection job
Readme for Express Security Content Update 2026-2 Page 2 of 4
○ Evaluation job
○ Collection-Evaluation-Reporting (CER).

● The Dynamic Link Libraries (DLLs) included in this package are required to evaluate the checks
successfully.

To install this Express Security Content Update

This Express SCU package contains following files:
● CCS_ExpressSCU_2026-2_Win.exe
● Symantec.CSM.UnixPlatformContent.RHELv1.0.5.dll

Perform following steps to install this Express SCU:

1. Download the CCS_ExpressSCU_2026-2_Win.zip file from the Broadcom support portal and save the zip file to a single folder on the Control Compliance Suite Application Server system.
2. Extract the contents of the zip file into the same folder.
3. Double-click the executable file, CCS_ExpressSCU_2026-2_Win.exe.
4. The Symantec Control Compliance Suite Express Security Content Update Installer welcome screen is displayed.
5. Click Start to proceed with the installation procedure and follow the on-screen instructions.
6. Click Finish after the installation of the technical standards is completed.

Note: The newly installed CCS predefined technical standards are listed in the Standards workspace
under the corresponding Control Compliance Suite platform.

To deploy the Dlls
Note: If Express SCU 2026-1 and its associated DLL files are already deployed on the CCS system,
the required DLL is already available in the setup. No additional deployment is required.

Changes/Enhancements
● Improved complex check algorithms to enhance accuracy and reliability.
Deployment of DIIs

1. On the CCS Manager system, stop the Symantec Data Processing Service.
2. Download the CCS_ExpressSCU_2026-2_Win.zip file and save it to a single folder on the CCS Manager system in Data collection and evaluation roles.
3. Extract the contents of the zip file into the same folder.
4. Back up the following file(s) and then replace them with the updated versions from the CCS_ExpressSCU_2026-2_Win.zip file.
   File Name Location
   Symantec.CSM.UnixPlatformContent.RHELv1.0.5.dll <InstallDir>\Symantec\CCS\Reporting
   and Analytics\DPS