diff --git a/windows/security/book/conclusion.md b/windows/security/book/conclusion.md index d9f04ff976..35b37a1150 100644 --- a/windows/security/book/conclusion.md +++ b/windows/security/book/conclusion.md @@ -58,10 +58,10 @@ Enhanced: |-|-| |**1**| Microsoft digital defense report, CISO executive summary, October 2023.| |**2**| Windows 11 Survey Report. Techaisle, September 2024. Windows 11 results are in comparison with Windows 10 devices.| -|**3**| The Passkey can be saved locally to the Windows device and authenticated via Windows Hello or Windows Hello for Business. Hardware dependent.| -|**4**| Commissioned study delivered by Forrester Consulting “The Total Economic Impact™ of Windows 11 Pro Devices”, December 2022. Note, quantified benefits reflect results over three years combined into a single composite organization that generates $1 billion in annual revenue, has 2,000 employees, refreshes hardware on a four-year cycle, and migrates the entirety of its workforce to Windows 11 devices.| -|**5**| Windows 11 results are in comparison with Windows 10 devices. *Windows 11 Survey Report*, Techaisle, February 2022.| -|**6**| Requires developer enablement.| +|**3**| Requires developer enablement.| +|**4**| Sold separately.| +|**5**| The Passkey can be saved locally to the Windows device and authenticated via Windows Hello or Windows Hello for Business. Hardware dependent.| +|**6**| Commissioned study delivered by Forrester Consulting “The Total Economic Impact™ of Windows 11 Pro Devices”, December 2022. Note, quantified benefits reflect results over three years combined into a single composite organization that generates $1 billion in annual revenue, has 2,000 employees, refreshes hardware on a four-year cycle, and migrates the entirety of its workforce to Windows 11 devices.| |**7**| Sold separately.| |**8**| Commissioned study delivered by Forrester Consulting. *The Total Economic Impact™ of Windows 11 Pro Devices*, December 2022. Note: quantified benefits reflect results over three years combined into a single composite organization that generates $1 billion in annual revenue, has 2,000 employees, refreshes hardware on a four-year cycle, and migrates the entirety of its workforce to Windows 11 devices.| |**9**|Feature or functionality delivered using [servicing technology](https://support.microsoft.com/topic/b0aa0a27-ea9a-4365-9224-cb155e517f12).| diff --git a/windows/security/book/index.md b/windows/security/book/index.md index e7de233c18..659ba7180e 100644 --- a/windows/security/book/index.md +++ b/windows/security/book/index.md @@ -27,13 +27,13 @@ Support for Windows 10 is ending soon on October 14, 2025. Upgrading or replacin Windows 11 enables you to focus on your work, not your security settings. Out-of-the-box features such as credential safeguards, malware shields, and application protection led to a reported 62% drop in security incidents, including a 3.0x reduction in firmware attacks. [\[2\]](conclusion.md#footnote2) -In Windows 11, hardware and software work together to shrink the attack surface, protect system integrity, and shield valuable data. New and enhanced features are designed for security by default. For example, Win32 apps in isolation[\[6\]](conclusion.md#footnote6), token protection[\[6\]](conclusion.md#footnote6), passkeys and Microsoft Intune Endpoint Privilege Management[\[7\]](conclusion.md#footnote7) are some of the latest capabilities that help protect organizations and individual users against attack. Windows Hello and Windows Hello for Business work with hardware-based features like Trusted Platform Module (TPM) 2.0 and biometric scanners and Windows presence sensing to enable easier, secure sign-on and protection of your data and credentials. +In Windows 11, hardware and software work together to shrink the attack surface, protect system integrity, and shield valuable data. New and enhanced features are designed for security by default. For example, Win32 apps in isolation[\[3\]](conclusion.md#footnote3), token protection[\[3\]](conclusion.md#footnote3), passkeys and Microsoft Intune Endpoint Privilege Management[\[4\]](conclusion.md#footnote4) are some of the latest capabilities that help protect organizations and individual users against attack. Windows Hello and Windows Hello for Business work with hardware-based features like Trusted Platform Module (TPM) 2.0 and biometric scanners and Windows presence sensing to enable easier, secure sign-on and protection of your data and credentials. Existing security features are also continuously enhanced across Windows 11. For example, Bitlocker encryption has been optimized for additional security and performance and is available on more devices. ### Identity protection -Attackers are increasingly targeting employees and their devices, so organizations need stronger security against increasingly sophisticated cyberthreats. Windows 11 provides proactive protection against credential theft. Windows Hello and TPM 2.0 work together to shield identities, and features like passkeys and secure biometric sign-in virtually eliminate the risk of lost or stolen passwords. [\[3\]](conclusion.md#footnote3) Enhanced phishing protection also increases safety; in fact, businesses reported 2.9x fewer instances of identity theft with the hardware-backed protection in Windows 11. [\[2\]](conclusion.md#footnote2) +Attackers are increasingly targeting employees and their devices, so organizations need stronger security against increasingly sophisticated cyberthreats. Windows 11 provides proactive protection against credential theft. Windows Hello and TPM 2.0 work together to shield identities, and features like passkeys and secure biometric sign-in virtually eliminate the risk of lost or stolen passwords. [\[5\]](conclusion.md#footnote5) Enhanced phishing protection also increases safety; in fact, businesses reported 2.9x fewer instances of identity theft with the hardware-backed protection in Windows 11. [\[2\]](conclusion.md#footnote2) ### Application safeguards @@ -41,7 +41,7 @@ Help keep business data secure and employees productive with robust safeguards a ### Device health and access control -Increase protection and efficiency with Windows 11 and chip-to-cloud security. Microsoft provides the tools needed to attest that the devices connecting to your network, or accessing your data and resources, are trustworthy. You can enforce security policies and conditional access with modern device management (MDM) solutions such as Microsoft Intune, Microsoft Entra ID, and a comprehensive MDM security baseline. Security by default not only enables people to work securely anywhere, but it also simplifies IT. A streamlined, chip-to-cloud security solution based on Windows 11 improves productivity for IT and security teams by a reported 25%. [\[4\]](conclusion.md#footnote4) +Increase protection and efficiency with Windows 11 and chip-to-cloud security. Microsoft provides the tools needed to attest that the devices connecting to your network, or accessing your data and resources, are trustworthy. You can enforce security policies and conditional access with modern device management (MDM) solutions such as Microsoft Intune, Microsoft Entra ID, and a comprehensive MDM security baseline. Security by default not only enables people to work securely anywhere, but it also simplifies IT. A streamlined, chip-to-cloud security solution based on Windows 11 improves productivity for IT and security teams by a reported 25%. [\[6\]](conclusion.md#footnote6) ### Chip-to-cloud security