Protected COM interfaces

Is there any CIS process that updates / maintains these entries?

I have some entries imported from v4.x.latest config that do not exist in the current v5 default config and vice versa.

Should I delete the ones that don’t exist in v5 default config and add the one’s missing, or just add the one’s missing?

I think you should add the missing ones.