CIS Snowflake Foundations v1.0.0 L2

This audit file has been deprecated and will be removed in a future update.

Name: CIS Snowflake Foundations v1.0.0 L2

Updated: 8/7/2026

Authority: CIS

Plugin: Snowflake

Revision: 1.1

Estimated Item Count: 9

Filename: CIS_Snowflake_Foundations_v1.0.0_L2.audit

Size: 22.8 kB

MD5: ce0fa0f89abc40ab0802855f06818378

SHA256: b253e4bf2e846e2452f34a5516046c9f4e7ee5a1e7f1524aef782112ac63c59c

Description	Categories
1.2 Ensure Snowflake SCIM integration is configured to automatically provision and deprovision users and groups (i.e. roles)
2.9 Ensure monitoring and alerting exists for sessions from unsupported Snowflake Connector for Python and JDBC and ODBC drivers
3.1 Ensure that an account-level network policy has been configured to only allow access from trusted IP addresses
4.1 Ensure yearly rekeying is enabled for a Snowflake account
4.3 Ensure that the DATA_RETENTION_TIME_IN_DAYS parameter is set to 90 for critical data
4.4 Ensure that the MIN_DATA_RETENTION_TIME_IN_DAYS account parameter is set to 7 or higher
4.9 Ensure that Tri-Secret Secure is enabled for the Snowflake account
4.10 Ensure that data masking is enabled for sensitive data
4.11 Ensure that row-access policies are configured for sensitive data