Policy Audit Library Updates, October 2026
Qualys’ library of built-in policies makes it easy to comply with the widely adopted security standards and regulations. The platform offers a broad range of policies, including many that have been certified by the Center for Internet Security (CIS), as well as security guidelines and industry best practices from operating system and application vendors.
Qualys’ Certification Page on the CIS website has also been updated.
CIS Benchmark Policies
Center for Internet Security (CIS) Benchmark policies are technical guidelines for organizations to improve their cybersecurity posture by aligning with recommended secure configurations. By leveraging industry best practices, these guidelines help reduce the risk of cyberattacks, such as data breaches.
DISA STIG Policies
STIG stands for Security Technical Implementation Guide, which is a set of cybersecurity guidelines published by the Defense Information Systems Agency (DISA). These guidelines equip organizations with the necessary tools to adhere to rules, regulations, best practices, and federal laws, facilitating compliance and bolstering cybersecurity measures.
CIS STIG Policies
CIS STIG Benchmarks are secure configuration guidelines released by the Center for Internet Security (CIS) and derived directly from DISA Security Technical Implementation Guides (STIGs). They are functionally equivalent to DISA STIGs and differ only in formatting and presentation, not in security controls or remediation guidance.
Qualys Policies
Qualys oversees the discovery and resolution of technical issues while implementing robust policy frameworks. Researchers within Qualys actively identify cybersecurity misconfiguration and enact technical policies to fortify systems and safeguard against potential threats.
Safeguard Computer Security Evaluation Matrix (SCSEM)
It typically comprises a structured set of criteria, guidelines, and metrics designed to measure various aspects of security, such as confidentiality, integrity, availability, and compliance.
Compliance Standards
Compliance standards are regulatory frameworks that safeguard sensitive data and help ensure privacy and security. They offer guidelines and best practices for organizations to achieve compliance and mitigate risks in handling sensitive information.
New Policies/Mandates
Listed below are the number of policies and mandates deployed in October 2026:
| CIS Benchmark Policies | 11 |
| DISA STIG Policy | 19 |
| CIS STIG Benchmark | 1 |
| Industry Best Practices Policy | 13 |
| New Supported Mandates | 0 |
| Deprecated Mandates | 0 |
Listed below are the newly published policies and mandates:
| CIS Benchmark Policies | CIS Benchmark for MongoDB 8, v2.0.0 CIS Benchmark for Apache HTTP Server 2.4, v2.4.0 CIS Benchmark for Oracle Database 26ai on Linux Server, v1.0.0 CIS Benchmark for Oracle Database 26ai on Windows Server, v1.0.0 CIS Benchmark for Oracle Database 26ai, v1.0.0 CIS Benchmark for VMware ESXi 7.0, V1.6.0 CIS Benchmark for PostgreSQL 18, v1.0.0 CIS Benchmark for Arista EOS, v1.0.0 CIS Benchmark for Microsoft Windows 10 Enterprise, v5.0.0 CIS Benchmark for Microsoft Windows Server 2025 Stand-alone, v2.0.0 CIS Benchmark for Microsoft Azure Database Services, v2.0.0 |
| DISA STIG Policies | DISA Security Technical Implementation Guide (STIG) for Oracle Enterprise Linux 9, V1R6 DISA Security Technical Implementation Guide (STIG) for MongoDB Enterprise Advanced 7.x, V1R2 DISA Security Technical Implementation Guide (STIG) for Mozilla Firefox, V6R9 DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2019 DC, V3R9 DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2019 MS, V3R9 DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2022 MS, V2R10 DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2022 DC, V2R10 DISA Security Technical Implementation Guide (STIG) for Apache 2.4 Server for UNIX, V3R3 DISA Security Technical Implementation Guide (STIG) for IBM WebSphere Traditional V9.x, V2R1 DISA Security Technical Implementation Guide (STIG) for VMware vSphere ESXi 7.0, V1R5 DISA Security Technical Implementation Guide (STIG) for VMware vSphere vCenter Server 7, V1R4 DISA Security Technical Implementation Guide (STIG) for Apache 2.4 Site for UNIX, V2R7 DISA Security Technical Implementation Guide (STIG) for IIS 10 Server, V3R8 DISA Security Technical Implementation Guide (STIG) for IIS 10 Site, V2R17 DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2022 DC, V2R11 DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2022 MS, V2R11 DISA Security Technical Implementation Guide (STIG) for Microsoft Windows 11, V2R11 DISA Security Technical Implementation Guide (STIG) for Ubuntu 24.04 LTS, V1R7 DISA Security Technical Implementation Guide (STIG) for Apple macOS 26 (Tahoe) STIG, V1R4 |
| CIS STIG Benchmark | CIS Benchmark for Microsoft Windows 11 STIG, v1.2.0 |
| Industry and Best Practices Policies | Safeguard Computer Security Evaluation Matrix for SUSE Linux Enterprise 15, v5.0 Safeguard Computer Security Evaluation Matrix for SUSE Linux Enterprise 12, v4.2 Safeguard Computer Security Evaluation Matrix for Cisco IOS 15, v7.0 Safeguard Computer Security Evaluation Matrix for Cisco IOS 16, v7.0 Safeguard Computer Security Evaluation Matrix for Cisco NX OS, v7.0 Safeguard Computer Security Evaluation Matrix for VMware ESX 7.0, v5.0 Safeguard Computer Security Evaluation Matrix for Cisco IOS 17, v7.0 Security Configuration and Compliance Policy for PingFederate Security Configuration and Compliance Policy for Nutanix CVM Security Configuration and Compliance Policy for Ubuntu Linux 26.x Safeguard Computer Security Evaluation Matrix for Windows Server 2025, v1.0 Security Configuration and Compliance Policy for Nutanix AHV Security Configuration and Compliance Policy for Kali Linux 2026.x |
| New Supported Mandates | NA |
| Deprecated mandates | NA |
Policy Updates
We have updated your Policy Library. The following policies and mandates have been re-released as part of our customer CRM.
| Policy | Update |
| CIS Benchmark for Docker, v1.8.0 | Re-release for CIS Benchmark for Docker, v1.8.0, to replace CID 10760 with CID 32669. |
| CIS IBM AIX 7 Benchmark, v1.2.0 | Re-release for CIS IBM AIX 7 Benchmark, v1.2.0, to update the regular expression for CID 30491, CID 30492, CID 30493, and CID 30494. |
| DISA Security Technical Implementation Guide (STIG) for Ubuntu 24.04 LTS, V1R4 | Re-release for DISA Security Technical Implementation Guide (STIG) for Ubuntu 24.04 LTS, V1R4, to update the regular expression for CID 19658. |
| CIS Benchmark for Red Hat Enterprise Linux 10, v1.0.1 | Re-release for CIS Benchmark for Red Hat Enterprise Linux 10, v1.0.1, to replace CID 31171 with CID 32670 in the policy. |
| CIS Benchmark for Red Hat Enterprise Linux 8, v4.0.0 | Re-release for CIS Benchmark for Red Hat Enterprise Linux 8, v4.0.0, to remove the CID 22691, CID 12757, CID 24747 and add the CID 29182. |
| CIS Benchmark for Red Hat Enterprise Linux 10 STIG, v1.0.0 | Re-release for CIS Benchmark for Red Hat Enterprise Linux 10 STIG, v1.0.0, to remove and re-add the CID 29152 in the policy. |
| CIS Benchmark for Apple macOS 26 Tahoe, v1.1.0 | Re-release for CIS Benchmark for Apple macOS 26 Tahoe, v1.1.0, to update the cover page. |
| DISA Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 10, V1R1 | Re-release for DISA Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 10, V1R1, to remove and re-add the CID 29152 in the policy. |
| DISA Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 9, V2R9 | Re-release for DISA Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 9, V2R9, to update the regular expression for CDI 27202 and CID 20533. |
| CIS Benchmark for Ubuntu Linux 24.04 LTS, v1.0.0 | Re-release for CIS Benchmark for Ubuntu Linux 24.04 LTS, v1.0.0, to update the regular expression for CID 26437, 29134, 24911, 5057. |
| CIS Benchmark for Ubuntu Linux 22.04 LTS, v3.0.0 | Re-release for CIS Benchmark for Ubuntu Linux 22.04 LTS, v3.0.0, to update the regular expression for CID 26437, 29134, 24911, 5057. |
| CIS Benchmark for CentOS Linux 6, v3.0.0 | Re-release for CIS Benchmark for CentOS Linux 6, v3.0.0, to add DOC ID in the Policy |
| CIS Benchmark for CentOS Linux 8, v2.0.0 | Re-release for CIS Benchmark for CentOS Linux 8, v2.0.0, to make multiple fixes for multiple policies, and Control Doc Addition for CentOS 6. |
| CIS Benchmark for Debian Linux 11, v2.0.0 | Re-release for CIS Benchmark for Debian Linux 11, v2.0.0, to add the CIDs 14401,14402,14404 |
| CIS Benchmark for Oracle Linux 7, v4.0.0 | Re-release for CIS Benchmark for Oracle Linux 7, v4.0.0, to add the CIDs 22731 and 22730 |
| CIS Benchmark for Oracle Solaris 10, v5.2.0 | Re-release for CIS Benchmark for Oracle Solaris 10, v5.2.0, to add CID 10624 |
| CIS Benchmark for Ubuntu Linux 18.04 LTS, v2.2.0 | Re-release for CIS Benchmark for Ubuntu Linux 18.04 LTS, v2.2.0, to add CIDs 14401, 14402, 14404, 7343, 7344, 11704, 7076, and 7077 |
| DISA Security Technical Implementation Guide (STIG) for HPE Aruba Networking AOS Wireless, V1R1 | Re-release for DISA Security Technical Implementation Guide (STIG) for HPE Aruba Networking AOS Wireless, V1R1, to add ArubaOS 10.x technology in existing DISA policies. |
| DISA Security Technical Implementation Guide (STIG) for HPE Aruba Networking AOS VPN, V1R1 | Re-release for DISA Security Technical Implementation Guide (STIG) for HPE Aruba Networking AOS VPN, V1R1, to add ArubaOS 10.x technology in existing DISA policies. |
| DISA Security Technical Implementation Guide (STIG) for HPE Aruba Networking AOS NDM, V1R1 | Re-release for DISA Security Technical Implementation Guide (STIG) for HPE Aruba Networking AOS NDM, V1R1, to add ArubaOS 10.x technology in existing DISA policies. |
| CIS Benchmark for FortiGate 7.0.x, v1.4.0 | Re-release for CIS Benchmark for FortiGate 7.0.x, v1.4.0, to add CID 32800. |
| CIS Benchmark for Ubuntu Linux 24.04 LTS, v1.0.0 | Re-release for CIS Benchmark for Ubuntu Linux 24.04 LTS, v1.0.0, to add in the policy: CIS Ref: 1.7.2 to 1.7.10 to CID 11327 Two controls 32253 [5.1.17] and 32272 [5.1.17] in the policy |
| DISA Security Technical Implementation Guide (STIG) for Palo Alto Networks NDM, V3R3 | Re-release for DISA Security Technical Implementation Guide (STIG) for Palo Alto Networks NDM, V3R3 policy to update regular expressions for 11915 and 11914 controls. |
| CIS Benchmark for Amazon Linux 2023, v1.0.0 | Re-release for CIS Benchmark for Amazon Linux 2023, v1.0.0, to add CID 32266 and CID 32267. |
| DISA Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 9, V2R9 | Re-release DISA Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 9, V2R9, to update the regular expression of CID 20533, CID 27202, and CID 29155. |
| Security Configuration and Compliance Policy for Amazon RDS – PostgreSQL Database | Re-release for Security Configuration and Compliance Policy for Amazon RDS – PostgreSQL Database, to remove controls 11154, 14166, and 15928. |
| Security Configuration and Compliance Policy for Amazon Aurora RDS – PostgreSQL Database | Re-release for Security Configuration and Compliance Policy for Amazon Aurora RDS – PostgreSQL Database, to remove the controls 11154, 14166, and 15928. |
| CIS Benchmark for Oracle Linux 8, v4.0.0 | Re-release for CIS Benchmark for Oracle Linux 8, v4.0.0, to remove the CID 27274, 27275, 5044, 5045 27268 and 27269. |
| CIS Benchmark for Oracle Linux 9, v2.0.0 | Re-release for CIS Benchmark for Oracle Linux 9, v2.0.0, to remove the CID 27274, 27275, 5044, 5045 27268 and 27269. |
| CIS Benchmark for Red Hat Enterprise Linux 9, v2.0.0 | Re-release for CIS Benchmark for Red Hat Enterprise Linux 9, v2.0.0, to: Update cardinality for the CID 29127 Replace CID 28632 with CID 32567 Update the regular expression for the controls CID 25372, CID 10155, CID 10156 |
| CIS Benchmark for Google Chrome Group Policy, v1.1.0 | Re-release for CIS Benchmark for Google Chrome Group Policy, v1.1.0, to add Control to L1 Profile and reset L1 Profile. |
| DISA Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 8, V2R8 | Re-release for DISA Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 8, V2R8, to add two separate controls for the requirement SV-230245r1017063 and SV-230246r1017064, SV-230247r1017065 1752 for ownership and 28553 for permissions |
| DISA Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 10, V1R1 | Re-release for DISA Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 10, V1R1, to add two separate controls for the requirement SV-230245r1017063 and SV-230246r1017064, SV-230247r1017065 1752 for ownership and 28553 for permissions |
| DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2025 MS, V1R1 | Re-release for DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2025 MS, V1R1, to change the control ID 13333 to a new control ID 30129 |
| DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2025 DC, V1R1 | Re-release for DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2025 DC, V1R1, to change control ID 13333 to a new control ID 30129 |
Deprecated Policies
- CIS Benchmark for Microsoft Windows 10 Enterprise, v4.0.0
- CIS Benchmark for Microsoft Windows Server 2025 Stand-alone, v1.0.0
- CIS Benchmark for Microsoft Windows 11 STIG, v1.1.0
- CIS Benchmark for VMware ESXi 7.0, V1.5.0
- DISA Security Technical Implementation Guide (STIG) for VMware vSphere ESXi 7.0, V1R4
- DISA Security Technical Implementation Guide (STIG) for VMware vSphere vCenter Server 7, V1R3
- DISA Security Technical Implementation Guide (STIG) for Apache 2.4 Site for UNIX, V2R6
- DISA Security Technical Implementation Guide (STIG) for IIS 10 Server, V3R7
- DISA Security Technical Implementation Guide (STIG) for IIS 10 Site, V2R16
- CIS Benchmark for Microsoft Azure Database Services, v1.0.0
- Security Configuration and Compliance Policy for Azure Database Services
- DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2022 MS, V2R10
- DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2022 MS, V2R10
- DISA Security Technical Implementation Guide (STIG) for Microsoft Windows 11, V2R9
- DISA Security Technical Implementation Guide (STIG) for Ubuntu 24, V1R4
- Safeguard Computer Security Evaluation Matrix for SUSE Linux Enterprise 15, v4.2
- Safeguard Computer Security Evaluation Matrix for SUSE Linux Enterprise 12, v5.0
- Safeguard Computer Security Evaluation Matrix for Cisco IOS 15, v6.2
- Safeguard Computer Security Evaluation Matrix for Cisco IOS 16, v6.2
- Safeguard Computer Security Evaluation Matrix for Cisco IOS 17, v6.2
- Safeguard Computer Security Evaluation Matrix for Cisco NX-OS, v6.2
- Safeguard Computer Security Evaluation Matrix for VMWare ESX 7.0, v4.4
- DISA Security Technical Implementation Guide (STIG) for MongoDB Enterprise Advanced 7.x, V1R1
- DISA Security Technical Implementation Guide (STIG) for Mozilla Firefox, V6R7
- DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2019 DC, V3R8
- DISA Security Technical Implementation Guide (STIG) for Microsoft Windows 11, V2R8
- DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2022 MS, V2R8
- DISA Security Technical Implementation Guide (STIG) for IIS 10 Site, V2R15
- DISA Security Technical Implementation Guide (STIG) for Apache 2.4 Server for UNIX, V3R2
- DISA Security Technical Implementation Guide (STIG) for IBM WebSphere Traditional V9.x, V1R1
- CIS Benchmark for MongoDB 8, v1.0.0
- CIS Benchmark for Apache HTTP Server 2.4, v2.3.0
Proposed Upcoming Policies
We plan to release the following policies and updates next month:
- CIS Wind River eLxr 12 Benchmark, v1.1.0
- DISA Security Technical Implementation Guide (STIG) for Mozilla Firefox, V6R7 (MacOS)
- DISA Security Technical Implementation Guide (STIG) for Microsoft Defender for Endpoint STIG, Ver 1, Rel 2
- DISA Security Technical Implementation Guide (STIG) for Red Hat OpenShift Container Platform 4.x STIG – Ver 2, Rel 5
- DISA Security Technical Implementation Guide (STIG) for Cloud Linux Alma Linux OS 9 STIG – Ver 1, Rel 5
- CIS Debian Linux 12 Benchmark, v2.0.0
- CIS Ubuntu Linux 24.04 LTS Benchmark, v2.0.0
CIS Red Hat OpenShift Container Platform Benchmark, v2.0.0 - DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2016 MS, V2R10
- DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2016 DC, V2R10
- DISA Security Technical Implementation Guide (STIG) for Cisco IOS Switch RTR, V3R3
- DISA Security Technical Implementation Guide (STIG) for Amazon Linux 2023, V1R5
- DISA Security Technical Implementation Guide (STIG) for Microsoft SQL Server 2016 Database, V3R5
- DISA Security Technical Implementation Guide (STIG) for Microsoft SQL Server 2022 Database, V1R3
- DISA Security Technical Implementation Guide (STIG) for Oracle Database 19c, V1R5
- DISA Security Technical Implementation Guide (STIG) for Solaris 11 X86, V3R7
- DISA Security Technical Implementation Guide (STIG) for Microsoft SQL Server 2022 Instance, V1R4
- DISA Security Technical Implementation Guide (STIG) for Microsoft (MS) Windows Defender Antivirus, V2R9
- DISA Security Technical Implementation Guide (STIG) for Apache Tomcat Application Server 9, V3R4
- DISA Security Technical Implementation Guide (STIG) for Apple macOS 15 (Sequoia), V1R7
- DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2025 MS, V1R3
- DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2025 DC, V1R3
- DISA Security Technical Implementation Guide (STIG) for SUSE Linux Enterprise 15.x, V2R9
- DISA Security Technical Implementation Guide (STIG) for Cisco IOS Router NDM, V3R8
- DISA Security Technical Implementation Guide (STIG) for Cisco IOS Switch NDM, V3R8
- DISA Security Technical Implementation Guide (STIG) for Ubuntu 22.04 LTS, V2R10
- DISA Security Technical Implementation Guide (STIG) for Cisco IOS XE Router NDM, V3R7
- DISA Security Technical Implementation Guide (STIG) for Cisco NX-OS Switch RTR, V3R4
- DISA Security Technical Implementation Guide (STIG) for Apache 2.4 Site for UNIX, V2R7
- DISA Security Technical Implementation Guide (STIG) for HPE Aruba Networking AOS Wireless, V1R2
- DISA Security Technical Implementation Guide (STIG) for Cisco ASA NDM, V2R5
- DISA Security Technical Implementation Guide (STIG) for Cisco NX-OS Switch L2S, V3R4
- DISA Security Technical Implementation Guide (STIG) for Cisco IOS XE Switch RTR, V3R4
- DISA Security Technical Implementation Guide (STIG) for Cisco IOS XE Switch NDM, V3R6
- DISA Security Technical Implementation Guide (STIG) for Cisco IOS XR Router NDM, V3R6
- DISA Security Technical Implementation Guide (STIG) for IBM z/OS RACF, V9R9
- DISA Security Technical Implementation Guide (STIG) for Apache 2.4 Site for Windows, V2R3
- DISA Security Technical Implementation Guide (STIG) for FortiGate Firewall NDM, V1R5
- DISA Security Technical Implementation Guide (STIG) for FortiGate Firewall, V1R4
- DISA Security Technical Implementation Guide (STIG) for Crunchy Data PostgreSQL, V3R2
- DISA Security Technical Implementation Guide (STIG) for Cisco IOS Switch L2S, V3R2
- DISA Security Technical Implementation Guide (STIG) for Microsoft OneDrive, V2R4
- DISA Security Technical Implementation Guide (STIG) for Apple macOS 13 (Ventura), V1R5
- DISA Security Technical Implementation Guide (STIG) for Oracle WebLogic Server 12c, V2R2
- DISA Security Technical Implementation Guide (STIG) for Arista MLS DCS-7000 Series L2S, V1R3
- DISA Security Technical Implementation Guide (STIG) for A10 Networks ADC NDM, V1R2
- DISA Security Technical Implementation Guide (STIG) for A10 Networks ADC ALG, V2R2
- DISA Security Technical Implementation Guide (STIG) for PostgreSQL 9.x, V2R5
- DISA Security Technical Implementation Guide (STIG) for Oracle Database 11.2g, V2R5
- DISA Security Technical Implementation Guide (STIG) for Apache 2.4 Server for Windows, V3R4
- DISA Security Technical Implementation Guide (STIG) for Infoblox 8.x DNS, V1R3
- DISA Security Technical Implementation Guide (STIG) for Palo Alto Networks NDM, V3R4
- DISA Security Technical Implementation Guide (STIG) for Microsoft DotNet Framework 4.0, V2R9
- DISA Security Technical Implementation Guide (STIG) for IBM WebSphere Liberty Server, V2R4
- DISA Security Technical Implementation Guide (STIG) for EDB Postgres Advanced Server, V2R3
- DISA Security Technical Implementation Guide (STIG) for EDB Postgres Advanced Server v11 on Windows, V2R4
- CIS Oracle Linux 9 Benchmark, v3.0.0
- CIS Red Hat Enterprise Linux 9 Benchmark, v3.0.0
- CIS Alma Linux OS 9 Benchmark, v3.0.0
- CIS Rocky Linux 9 Benchmark, v3.0.0
- CIS Debian Linux 13 Benchmark, v1.1.0
- CIS VMware ESXi 9.0 Benchmark, v1.0.0
- DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2025 MS, V1R4
- DISA Security Technical Implementation Guide (STIG) for Microsoft Windows Server 2025 DC, V1R4
- DISA Security Technical Implementation Guide (STIG) for VMware vSphere vCenter Server 8, V2R5
- DISA Security Technical Implementation Guide (STIG) for VMware vSphere ESXi 8.0, V2R5
- DISA Security Technical Implementation Guide (STIG) for VMware vSphere 8.0 Virtual Machine, V2R2
Learn More
Discover how the Qualys Enterprise TruRisk™ Platform can help you reduce cyber risk and improve business outcomes through precise remediation activities. Learn more about it here.
Additional Information
Feel free to contact your Technical Account Manager (TAM) or Qualys Technical Support if you have any questions.