[Practice] If the operating system supports it, integrity checking of critical operating system files should be enabled and tested. Third-party tools may also be used to implement this. [Category I] Required [Category II & III] 
Recommended