CIS Sybase 15.0 L2 DB v1.1.0

Name: CIS Sybase 15.0 L2 DB v1.1.0

Updated: 6/27/2023

Authority: CIS

Plugin: SybaseDB

Revision: 1.0

Estimated Item Count: 23

Filename: CIS_Sybase_15_0_v1_1_0_L2_Database.audit

Size: 45.5 kB

MD5: be1e6e7fe2dc93d1fe417f3f920af516

SHA256: 7482de8cbb3cbbe49e242ed43336bbaf5eb96ea9257277e98fcbdd0586490a40

Description	Categories
1.6 Enforce password complexity - check password for digit	IDENTIFICATION AND AUTHENTICATION
1.6 Enforce password complexity - exec sp_passwordpolicy 'list'	IDENTIFICATION AND AUTHENTICATION
1.6 Enforce password complexity - minimum password length	IDENTIFICATION AND AUTHENTICATION
1.7 Set lockout thresholds
1.8 Set a system-wide password expiration	IDENTIFICATION AND AUTHENTICATION
1.9 Set passwords on important roles
1.10 Use login triggers to validate users IP addresses - exec sp_displaylogin <Login_Name>
1.10 Use login triggers to validate users IP addresses - exec sp_logintrigger
2.1 Enable Secure Socket Layer (SSL) Encryption - enable ssl
2.1 Enable Secure Socket Layer (SSL) Encryption - lsciphers
2.5.2 Consider disabling remote access
3.2.1 Review use of the guest user in databases
3.3.2 Limit access via procedures, views and triggers
3.6.2 Store encryption keys in a separate database
3.6.3 Password protect encryption keys	IDENTIFICATION AND AUTHENTICATION
4.1 Ensure sufficient space for logs
4.5 Periodically review audit settings
4.7 Review suspend audit configuration when device is full
4.9 Monitor Usage Statistics
5.3.1 Remove operating system related ESPs
5.3.2 Remove mail related ESPs
6.2 Ensure the server is physically secure
6.8 Run a host and/or network-based packet firewall