im not entirely sure which is why i wanted to ask but as many computer enthusiasts know, when it comes to windows, the Registry is an extremely critical component to the system and can be easily manipulated to destroy it.
Yes CIS Does Prevent UnWhitelisted Applications changing critical keys;
You may view the list of ‘watched’ keys in
CIS > Defense+ > Computer Security Policy > Protected Registry Keys