CCS Express SCU 2026-1 Release

Products

• Control Compliance Suite Standards Server
• Control Compliance Suite
• Control Compliance Suite Directory Services
• Control Compliance Suite Standards Module

Issue/Introduction

Express SCU 2026-1 has been released for Control Compliance Suite

Resolution

About this Express Security Content Update

Overview
An Express Security Content Update (Express SCU) is an out-of-band content update that is complementary to the periodic Security Content Updates on Symantec Control Compliance Suite (CCS) 12.7 or later.
With an easy-to-install setup and an ad-hoc availability of a particular CCS predefined technical standard, Express SCU is an easy way of installing the required Content platform updates for CCS.
Every Express SCU is integrated with the subsequent SCU release.

Intended Audience

This Express SCU is applicable only to users that are running SCU 2024-2 and SCU 2025-1.
Contents of this Express Security Content Update

This Express SCU provides the latest version of the following CCS predefined technical standards:

Unix:

• CIS Red Hat Enterprise Linux 10 Benchmark v1.0.1 Level 1
• CIS Red Hat Enterprise Linux 10 Benchmark v1.0.1 Level 2

Generic Devices:

• CIS Apple macOS 15.0 Sequoia Benchmark v2.0.0 Level 1
• CIS Apple macOS 15.0 Sequoia Benchmark v2.0.0 Level 2

Windows:

• CIS Microsoft Windows Server 2022 Benchmark v4.0.0 Level 1
• CIS Microsoft Windows Server 2022 Benchmark v4.0.0 Level 2
• CIS Microsoft Windows Server 2022 Benchmark v4.0.0 - Next Generation Windows Security

● Added Target type:

• MacOS 15.x Devices
• Red Hat Enterprise Linux 10.x Machines

Using these latest technical standards, you can assess the security compliance posture of Red Hat Enterprise Linux 10 machines, Microsoft Windows Server 2022, and MacOS 15.x devices in your environment.
Installing this Express Security Content Update

This Express SCU includes an installer file, CCS_ExpressSCU_2026-1_Win.exe. Use this installer file to install the latest version of the CCS predefined technical standards, which are listed in the preceding section. This installer needs to be run manually only on the CCS Application Server.

Prerequisites

The following are the prerequisites to install this Express SCU:

• For the CCS 12.7 version: Security Content Update 2024-2 or 2025-1 is installed.
• For the CCS 12.8 version: Security Content Update 2025-1 is installed.
• Control Compliance Suite 12.7 or later is installed.
• Ensure that the user has the Control Compliance Suite administrator and local administrator privileges.
• Ensure that the following jobs are NOT running on the Control Compliance Suite Application Server:
  ○ Data collection job
  ○ Evaluation job
  ○ Collection-Evaluation-Reporting (CER).
• The Dynamic Link Libraries (DLLs) included in this package are required to evaluate the checks successfully.

To install this Express Security Content Update
This Express SCU package contains following files:

• CCS_ExpressSCU_2026-1_Win.exe
• Symantec.CSM.UnixPlatformContent.RHELv1.0.5.dll
• BVUnixDataSourceImpl.dll

Perform following steps to install this Express SCU:

1. Download the CCS_ExpressSCU_2026-1_Win.zip file and save the zip file to a single folder on the Control Compliance Suite Application Server system.
2. Extract the contents of the zip file into the same folder.
3. Double-click the executable file, CCS_ExpressSCU_2026-1_Win.exe.
4. The Symantec Control Compliance Suite Express Security Content Update Installer welcome screen is displayed.
5. Click Start to proceed with the installation procedure and follow the on-screen instructions.
6. Click Finish after the installation of the technical standards is completed.
   Note: The newly installed CCS predefined technical standards are listed in the Standards workspace under the corresponding Control Compliance Suite platform.

To deploy the Dlls
Changes/Enhancements

• Updated the Group data source to replace the deprecated egrep command with a supported alternative for newer Linux distributions.
• Improved complex check algorithms to enhance accuracy and reliability.

Deployment of DIIs

1. On the CCS Manager system, stop the Symantec Data Processing Service.
2. Download the CCS_ExpressSCU_2026-1_Win.zip file and save it to a single folder on the CCS Manager system in Data collection and evaluation roles.
3. Extract the contents of the zip file into the same folder.
4. Back up the following file(s) and then replace them with the updated versions from the CCS_ExpressSCU_2026-1_Win.zip file:
   

   File Name	Location
   Symantec.CSM.UnixPlatformContent.RHELv1.0.5.dll	<InstallDir>\Symantec\CCS\Reporting and Analytics\DPS
   BVUnixDataSourceImpl.dll	<InstallDir>\Symantec\CCS\Reporting and Analytics\DPS\Control\Unix