| 1.1 Place Databases on Non-System Partitions | CIS MariaDB 10.11 v1.0.0 L1 MariaDB RDBMS on Linux Unix | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.4.2 Ensure bootloader password is set - password_pbkdf2 | CIS Debian 9 Workstation L1 v1.0.1 | Unix | CONFIGURATION MANAGEMENT |
| 1.4.2 Ensure bootloader password is set - password_pbkdf2 | CIS Debian 9 Server L1 v1.0.1 | Unix | CONFIGURATION MANAGEMENT |
| 1.4.2 Ensure bootloader password is set - set superusers | CIS Debian 9 Server L1 v1.0.1 | Unix | CONFIGURATION MANAGEMENT |
| 1.4.2 Ensure bootloader password is set - set superusers | CIS Debian 9 Workstation L1 v1.0.1 | Unix | CONFIGURATION MANAGEMENT |
| 1.5 Installing ISC BIND 9 - named location | CIS BIND DNS v3.0.1 Caching Only Name Server | Unix | CONFIGURATION MANAGEMENT |
| 2.4.8 Ensure File Sharing Is Disabled | CIS Apple macOS 10.15 Catalina v3.0.0 L1 | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 3.13 Ensure Access to Special Purpose Application Writable Directories is Properly Restricted | CIS Apache HTTP Server 2.4 v2.3.0 L1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 3.13 Ensure Access to Special Purpose Application Writable Directories is Properly Restricted | CIS Apache HTTP Server 2.2 L1 v3.6.0 | Unix | ACCESS CONTROL |
| 4.5.3.3 Ensure default user umask is configured | CIS Oracle Linux 7 v4.0.0 L1 Workstation | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 5.3 Ensure the Sudo Timeout Period Is Set to Zero | CIS Apple macOS 12.0 Monterey Cloud-tailored v1.1.0 L1 | Unix | ACCESS CONTROL |
| 5.3.3.3 Ensure default user umask is configured | CIS Linux Mint 22 v1.0.0 L1 Workstation | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION |
| 5.3.3.4.5 Ensure pam_unix includes a FIPS 140-2 approved hashing algorithm | CIS Red Hat Enterprise Linux 8 STIG v2.0.0 STIG | Unix | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.4.3.3 Ensure default user umask is configured | CIS Rocky Linux 10 v1.0.0 L1 Server | Unix | CONFIGURATION MANAGEMENT |
| 5.4.3.3 Ensure default user umask is configured | CIS Rocky Linux 8 v3.0.0 L1 Server | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION |
| 5.4.3.3 Ensure default user umask is configured | CIS Oracle Linux 10 v1.0.0 L1 Server | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION |
| 5.4.3.3 Ensure default user umask is configured | CIS Debian Linux 11 v2.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 5.4.3.3 Ensure default user umask is configured | CIS Debian Linux 12 v2.0.0 L1 Server | Unix | CONFIGURATION MANAGEMENT |
| 5.4.3.3 Ensure default user umask is configured | CIS Rocky Linux 10 v1.0.0 L1 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 5.4.3.3 Ensure default user umask is configured | CIS Rocky Linux 8 v3.0.0 L1 Workstation | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION |
| 5.4.3.3 Ensure default user umask is configured | CIS AlmaLinux OS 10 v1.0.0 L1 Server | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, MEDIA PROTECTION |
| 5.9 Ensure an agent for AWS Cloudwatch Logs is installed within Auto-Scaling Group for App-Tier | CIS Amazon Web Services Three-tier Web Architecture L1 1.0.0 | amazon_aws | AUDIT AND ACCOUNTABILITY |
| 18.5.19.2.1 (L2) Disable IPv6 (Ensure TCPIP6 Parameter 'DisabledComponents' is set to '0xff (255)') | CIS Microsoft Windows Server 2008 R2 Domain Controller Level 2 v3.3.1 | Windows | CONFIGURATION MANAGEMENT |
| CIS_Apple_macOS_15_Sequoia_STIG_v1.1.0_CAT_III.audit from CIS Apple macOS 15 Sequoia STIG v1.1.0 | CIS Apple macOS 15 Sequoia STIG v1.1.0 CAT III | Unix | |
| CIS_Apple_macOS_26_Tahoe_STIG_v1.0.0_CAT_II.audit from CIS Apple macOS 26 Tahoe STIG v1.0.0 | CIS Apple macOS 26 Tahoe STIG v1.0.0 CAT II | Unix | |
| CIS_IBM_WebSphere_Liberty_v1.0.0_L2.audit from CIS IBM WebSphere Liberty Benchmark v1.0.0 | CIS IBM WebSphere Liberty v1.0.0 L2 | Unix | |
| CIS_Microsoft_Exchange_Server_2019_v1.0.0_Level_1_Mailbox.audit from CIS Microsoft Exchange Server 2019 Benchmark v1.0.0 | CIS Microsoft Exchange Server 2019 L1 Mailbox v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| CIS_Microsoft_Exchange_Server_2019_v1.0.0_Level_1_MDM.audit from CIS Microsoft Exchange Server 2019 Benchmark v1.0.0 | CIS Microsoft Exchange Server 2019 L1 MDM v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| CIS_Microsoft_IIS_10.0_Site_STIG_v1.0.0_CAT_II.audit from CIS Microsoft IIS 10.0 Site STIG v1.0.0 | CIS Microsoft IIS 10.0 Site STIG v1.0.0 CAT II | Windows | |
| CIS_Microsoft_Office_Enterprise_v1.2.0_L2.audit from CIS Microsoft Office Enterprise Benchmark v1.2.0 | CIS Microsoft Office Enterprise v1.2.0 L2 | Windows | |
| CIS_Microsoft_SharePoint_2019_OS_v1.0.0_Level_1.audit from CIS Microsoft SharePoint 2019 Benchmark v1.0.0 | CIS Microsoft SharePoint 2019 OS v1.0.0 | Windows | |
| CIS_Microsoft_Windows_Server_2016_STIG_v4.0.0_DC_CAT_II.audit from CIS Microsoft Windows Server 2016 STIG v4.0.0 | CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT II | Windows | |
| CIS_Microsoft_Windows_Server_2016_STIG_v4.0.0_MS_CAT_II.audit from CIS Microsoft Windows Server 2016 STIG v4.0.0 | CIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT II | Windows | |
| CIS_Microsoft_Windows_Server_2019_STIG_v4.0.0_MS_CAT_I.audit from CIS Microsoft Windows Server 2019 STIG v4.0.0 | CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT I | Windows | |
| CIS_Microsoft_Windows_Server_2019_STIG_v4.0.0_MS_CAT_III.audit from CIS Microsoft Windows Server 2019 STIG v4.0.0 | CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT III | Windows | |
| CIS_Microsoft_Windows_Server_2022_STIG_v3.0.0_MS_CAT_III.audit from CIS Microsoft Windows Server 2022 STIG v3.0.0 | CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT III | Windows | |
| CIS_MS_Windows_8.1_v2.4.1_Level_2_Bitlocker.audit from CIS Microsoft Windows 8.1 Workstation Benchmark v2.4.1 | CIS Microsoft Windows 8.1 v2.4.1 L2 Bitlocker | Windows | |
| CIS_MySQL_5.7_Community_Benchmark_v2.0.0_Level_1_DB.audit from CIS Oracle MySQL 5.7 Community Edition Benchmark | CIS MySQL 5.7 Community Database L1 v2.0.0 | MySQLDB | |
| CIS_MySQL_5.7_Enterprise_Benchmark_v2.0.0_Level_1_DB.audit from CIS Oracle MySQL 5.7 Enterprise Edition Benchmark | CIS MySQL 5.7 Enterprise Database L1 v2.0.0 | MySQLDB | |
| CIS_Oracle_MySQL_Community_Server_9.7_v1.0.0_L2_MySQL_RDBMS_MySQLDB.audit from CIS Oracle MySQL Community Server 9.7 v1.0.0 | CIS Oracle MySQL Community Server 9.7 v1.0.0 L2 MySQL RDBMS MySQLDB | MySQLDB | |
| CIS_Oracle_MySQL_Enterprise_Edition_8.4_v1.1.0_L2_MySQL_RDBMS_MySQLDB.audit from CIS Oracle MySQL Enterprise Edition 8.4 v1.1.0 | CIS Oracle MySQL Enterprise Edition 8.4 v1.1.0 L2 MySQL RDBMS MySQLDB | MySQLDB | |
| CIS_Oracle_MySQL_Enterprise_Edition_9.7_v1.0.0_L1_MySQL_RDBMS_MySQLDB.audit from CIS Oracle MySQL Enterprise Edition 9.7 v1.0.0 | CIS Oracle MySQL Enterprise Edition 9.7 v1.0.0 L1 MySQL RDBMS MySQLDB | MySQLDB | |
| CIS_Oracle_MySQL_Enterprise_Edition_9.7_v1.0.0_L2_MySQL_RDBMS_MySQLDB.audit from CIS Oracle MySQL Enterprise Edition 9.7 v1.0.0 | CIS Oracle MySQL Enterprise Edition 9.7 v1.0.0 L2 MySQL RDBMS MySQLDB | MySQLDB | |
| CIS_VMware_ESXi_7.0_v1.5.0_L1.audit from CIS VMware ESXi 7.0 Benchmark v1.5.0 | CIS VMware ESXi 7.0 v1.5.0 L1 Bare Metal | Unix | |
| CIS_VMware_vSphere_8.0_ESXi_STIG_v1.0.0_CAT_III_Unix.audit from CIS VMware vSphere 8.0 ESXi STIG v1.0.0 | CIS VMware vSphere 8.0 ESXi STIG v1.0.0 CAT III Unix | Unix | |
| Ensure Reverse Path Filtering is enabled - /etc/sysctl ipv4 all rp_filter | Tenable Cisco Firepower Management Center OS Best Practices Audit | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Ensure Reverse Path Filtering is enabled - /etc/sysctl ipv4 default rp_filter | Tenable Cisco Firepower Management Center OS Best Practices Audit | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Ensure Reverse Path Filtering is enabled - sysctl ipv4 all rp_filter | Tenable Cisco Firepower Management Center OS Best Practices Audit | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| Ensure Reverse Path Filtering is enabled - sysctl ipv4 default rp_filter | Tenable Cisco Firepower Management Center OS Best Practices Audit | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| TCAT-AS-001670 - RECYCLE_FACADES must be set to true. | DISA STIG Apache Tomcat Application Server 9 v3r4 Middleware | Unix | CONFIGURATION MANAGEMENT |
