| 2.1.6 Ensure the latest firmware is installed | CIS Fortigate Level 2 v1.1.0 | FortiGate | |
| 2.5.2.1 Ensure Gatekeeper is Enabled | CIS Apple macOS 10.15 v2.0.0 L1 | Unix | |
| 2.5.2.1 Ensure Gatekeeper is Enabled | CIS Apple macOS 12.0 Monterey v1.0.0 L1 | Unix | |
| 2.5.2.1 Ensure Gatekeeper is Enabled | CIS Apple macOS 11 v2.0.0 L1 | Unix | |
| 2.5.7 Ensure Gatekeeper Is Enabled | CIS Apple macOS 11.0 Big Sur v3.0.0 L1 | Unix | |
| 2.5.7 Ensure Gatekeeper Is Enabled | CIS Apple macOS 11 v2.1.0 L1 | Unix | |
| 2.5.7 Ensure Gatekeeper Is Enabled | CIS Apple macOS 10.15 v2.1.0 L1 | Unix | |
| 2.5.7 Ensure Gatekeeper Is Enabled | CIS Apple macOS 12.0 Monterey v2.0.0 L1 | Unix | |
| 2.5.7 Ensure Gatekeeper Is Enabled | CIS Apple macOS 12.0 Monterey v1.1.0 L1 | Unix | |
| 2.5.7 Ensure Gatekeeper Is Enabled | CIS Apple macOS 12.0 Monterey v2.1.0 L1 | Unix | |
| 2.6.4 Ensure Gatekeeper Is Enabled | CIS Apple macOS 13.0 Ventura v1.0.0 L1 | Unix | |
| 7.5 Ensure that Endpoint Protection for all Virtual Machines is installed | CIS Microsoft Azure Foundations v1.5.0 L2 | microsoft_azure | |
| 7.6 Ensure that Endpoint Protection for all Virtual Machines is installed | CIS Microsoft Azure Foundations v2.0.0 L2 | microsoft_azure | |
| 7.6 Ensure that Endpoint Protection for all Virtual Machines is installed | CIS Microsoft Azure Foundations v2.1.0 L2 | microsoft_azure | SYSTEM AND INFORMATION INTEGRITY |
| 7.6 Ensure that the endpoint protection for all Virtual Machines is installed | CIS Microsoft Azure Foundations v1.3.1 L1 | microsoft_azure | |
| 18.4.8 Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled' | CIS Microsoft Windows Server 2016 STIG NG MS L3 v1.0.0 | Windows | |
| 18.4.8 Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled' | CIS Microsoft Windows Server 2016 STIG MS L1 v1.0.0 | Windows | |
| 18.4.8 Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled' | CIS Microsoft Windows Server 2016 STIG NG DC L3 v1.0.0 | Windows | |
| 18.4.8 Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled' | CIS Microsoft Windows Server 2016 STIG DC L1 v1.0.0 | Windows | |
| 18.4.8 Ensure 'MSS: (SafeDllSearchMode) Enable Safe DLL search mode (recommended)' is set to 'Enabled' | CIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.2.0 | Windows | |
| 18.8.14.1 Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical' | CIS Microsoft Windows Server 2016 STIG DC L1 v1.0.0 | Windows | |
| 18.8.14.1 Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical' | CIS Microsoft Windows Server 2016 STIG NG DC L3 v1.0.0 | Windows | |
| 18.8.14.1 Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical' | CIS Microsoft Windows Server 2016 STIG NG MS L3 v1.0.0 | Windows | |
| 18.8.14.1 Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical' | CIS Microsoft Windows Server 2016 STIG MS L1 v1.0.0 | Windows | |
| 18.8.14.1 Ensure 'Boot-Start Driver Initialization Policy' is set to 'Enabled: Good, unknown and bad but critical' | CIS Windows Server 2012 DC L1 v2.2.0 | Windows | |
| 18.8.14.2 Ensure 'Boot-Start Driver Initialization Policy' is set to 'Not Configured' or 'Enabled with anything except ALL' | CIS Microsoft Windows Server 2016 STIG NG MS L3 v1.0.0 | Windows | |
| 18.8.14.2 Ensure 'Boot-Start Driver Initialization Policy' is set to 'Not Configured' or 'Enabled with anything except ALL' | CIS Microsoft Windows Server 2016 STIG NG DC L3 v1.0.0 | Windows | |
| 18.9.45.11.2 Ensure 'Turn on e-mail scanning' is set to 'Enabled' | CIS Microsoft Windows Server 2016 MS L1 v1.3.0 | Windows | |
| 18.9.45.11.2 Ensure 'Turn on e-mail scanning' is set to 'Enabled' | CIS Microsoft Windows Server 2016 DC L1 v1.3.0 | Windows | |
| 18.9.45.14 Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block' | CIS Microsoft Windows Server 2016 MS L1 v1.3.0 | Windows | |
| 18.9.45.14 Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block' | CIS Microsoft Windows Server 2016 DC L1 v1.3.0 | Windows | |
| 18.9.45.14 Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block' | CIS Microsoft Windows Server 2019 MS L1 v1.2.0 | Windows | |
| 18.9.45.15 Ensure 'Turn off Microsoft Defender AntiVirus' is set to 'Disabled' | CIS Microsoft Windows Server 2019 MS L1 v1.2.0 | Windows | |
| 18.9.45.15 Ensure 'Turn off Microsoft Defender AntiVirus' is set to 'Disabled' | CIS Microsoft Windows Server 2019 DC L1 v1.2.0 | Windows | |
| 18.9.77.3.1 Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled' | CIS Microsoft Windows Server 2016 STIG DC L1 v1.0.0 | Windows | |
| 18.9.77.3.1 Ensure 'Configure local setting override for reporting to Microsoft MAPS' is set to 'Disabled' | CIS Microsoft Windows Server 2016 STIG NG DC L3 v1.0.0 | Windows | |
| 18.9.77.7.1 Ensure 'Turn on behavior monitoring' is set to 'Enabled' | CIS Microsoft Windows Server 2016 STIG MS L1 v1.0.0 | Windows | |
| 18.9.77.7.1 Ensure 'Turn on behavior monitoring' is set to 'Enabled' | CIS Microsoft Windows Server 2016 STIG NG DC L3 v1.0.0 | Windows | |
| 18.9.77.10.2 Ensure 'Turn on e-mail scanning' is set to 'Enabled' | CIS Microsoft Windows Server 2016 STIG NG DC L3 v1.0.0 | Windows | |
| 18.9.77.10.2 Ensure 'Turn on e-mail scanning' is set to 'Enabled' | CIS Microsoft Windows Server 2016 STIG NG MS L3 v1.0.0 | Windows | |
| 18.9.77.10.2 Ensure 'Turn on e-mail scanning' is set to 'Enabled' | CIS Microsoft Windows Server 2016 STIG MS L1 v1.0.0 | Windows | |
| 18.9.77.10.2 Ensure 'Turn on e-mail scanning' is set to 'Enabled' | CIS Microsoft Windows Server 2016 STIG DC L1 v1.0.0 | Windows | |
| 18.9.77.14 Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block' | CIS Microsoft Windows Server 2016 STIG NG MS L3 v1.0.0 | Windows | |
| 18.9.77.14 Ensure 'Configure detection for potentially unwanted applications' is set to 'Enabled: Block' | CIS Microsoft Windows Server 2016 STIG MS L1 v1.0.0 | Windows | |
| 18.9.77.14 Ensure 'Turn off Windows Defender AntiVirus' is set to 'Disabled' | CIS Microsoft Windows Server 2008 Member Server Level 1 v3.2.0 | Windows | |
| 18.9.77.14 Ensure 'Turn off Windows Defender AntiVirus' is set to 'Disabled' | CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.2.0 | Windows | |
| 18.9.77.15 Ensure 'Turn off Windows Defender AntiVirus' is set to 'Disabled' | CIS Microsoft Windows Server 2016 STIG MS L1 v1.0.0 | Windows | |
| 18.9.77.15 Ensure 'Turn off Windows Defender AntiVirus' is set to 'Disabled' | CIS Microsoft Windows Server 2016 STIG NG MS L3 v1.0.0 | Windows | |
| 18.9.77.15 Ensure 'Turn off Windows Defender AntiVirus' is set to 'Disabled' | CIS Microsoft Windows Server 2016 STIG NG DC L3 v1.0.0 | Windows | |
| 18.9.77.15 Ensure 'Turn off Windows Defender AntiVirus' is set to 'Disabled' | CIS Microsoft Windows Server 2016 STIG DC L1 v1.0.0 | Windows | |
