| 1.1 SQLD-22-000100 | CIS Microsoft SQL Server 2022 Database STIG v1.0.0 CAT I | MS_SQLDB | ACCESS CONTROL |
| 1.1.4.1 exec accounting | CIS Cisco IOS XR 7.x v1.0.1 L1 | Cisco | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 1.1.4.2 command accounting | CIS Cisco IOS XR 7.x v1.0.1 L1 | Cisco | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 1.1.4.3 network accounting | CIS Cisco IOS XR 7.x v1.0.1 L1 | Cisco | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 1.1.4.4 system accounting | CIS Cisco IOS XR 7.x v1.0.1 L1 | Cisco | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 1.2 MADB-10-000200 | CIS MariaDB Enterprise 10.x STIG v1.1.0 CAT I MySQLDB | MySQLDB | ACCESS CONTROL |
| 1.41 ALMA-09-006845 | CIS Cloud Linux AlmaLinux OS 9 STIG v1.0.0 CAT II | Unix | ACCESS CONTROL |
| 1.68 RHEL-09-215101 | CIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT II | Unix | ACCESS CONTROL |
| 2.1.1 Ensure centralized root access in AWS Organizations | CIS Amazon Web Services Foundations v7.0.0 L2 | amazon_aws | ACCESS CONTROL |
| 2.7 Ensure that a unique Certificate Authority is used for etcd | CIS Kubernetes v1.20 Benchmark v1.0.1 L2 Master | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 2.7 Ensure that a unique Certificate Authority is used for etcd | CIS Kubernetes v1.23 Benchmark v1.0.1 L2 Master | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 2.7 Ensure that a unique Certificate Authority is used for etcd | CIS Kubernetes v1.24 Benchmark v1.0.0 L2 Master | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 2.7 Ensure that a unique Certificate Authority is used for etcd | CIS Kubernetes v2.1.0 L2 Master Node | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.1 Ensure password failed attempts lockout is configured | CIS Oracle Linux 9 v3.0.0 L1 Server | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.1 Ensure password failed attempts lockout is configured | CIS Oracle Linux 9 v3.0.0 L1 Workstation | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.1 Ensure password failed attempts lockout is configured | CIS Rocky Linux 9 v3.0.0 L1 Server | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.1 Ensure password failed attempts lockout is configured | CIS Red Hat Enterprise Linux 9 v3.0.0 L1 Server | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.1 Ensure password failed attempts lockout is configured | CIS Red Hat Enterprise Linux 9 v3.0.0 L1 Workstation | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.1 Ensure password failed attempts lockout is configured | CIS AlmaLinux OS 9 v3.0.0 L1 Server | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.1 Ensure password failed attempts lockout is configured | CIS Rocky Linux 9 v3.0.0 L1 Workstation | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.1 Ensure password failed attempts lockout is configured | CIS AlmaLinux OS 9 v3.0.0 L1 Workstation | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.2 Ensure password unlock time is configured | CIS Rocky Linux 9 v3.0.0 L1 Server | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.2 Ensure password unlock time is configured | CIS Oracle Linux 9 v3.0.0 L1 Workstation | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.2 Ensure password unlock time is configured | CIS Red Hat Enterprise Linux 9 v3.0.0 L1 Workstation | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.2 Ensure password unlock time is configured | CIS AlmaLinux OS 9 v3.0.0 L1 Workstation | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.2 Ensure password unlock time is configured | CIS AlmaLinux OS 9 v3.0.0 L1 Server | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.2 Ensure password unlock time is configured | CIS Rocky Linux 9 v3.0.0 L1 Workstation | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.2 Ensure password unlock time is configured | CIS Red Hat Enterprise Linux 9 v3.0.0 L1 Server | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.2 Ensure password unlock time is configured | CIS Oracle Linux 9 v3.0.0 L1 Server | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.3 Ensure password failed attempts lockout includes root account | CIS Oracle Linux 9 v3.0.0 L2 Workstation | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.3 Ensure password failed attempts lockout includes root account | CIS Red Hat Enterprise Linux 9 v3.0.0 L2 Server | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.3 Ensure password failed attempts lockout includes root account | CIS Rocky Linux 9 v3.0.0 L2 Workstation | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.3 Ensure password failed attempts lockout includes root account | CIS AlmaLinux OS 9 v3.0.0 L2 Server | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.3 Ensure password failed attempts lockout includes root account | CIS Oracle Linux 9 v3.0.0 L2 Server | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.3 Ensure password failed attempts lockout includes root account | CIS AlmaLinux OS 9 v3.0.0 L2 Workstation | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.3 Ensure password failed attempts lockout includes root account | CIS Red Hat Enterprise Linux 9 v3.0.0 L2 Workstation | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 5.3.3.1.3 Ensure password failed attempts lockout includes root account | CIS Rocky Linux 9 v3.0.0 L2 Server | Unix | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION |
| 6.2.15 Ensure all groups in /etc/passwd exist in /etc/group | CIS Debian 8 Server L1 v2.0.2 | Unix | ACCESS CONTROL |
| 6.2.15 Ensure all groups in /etc/passwd exist in /etc/group | CIS Debian 8 Workstation L1 v2.0.2 | Unix | ACCESS CONTROL |
| 6.6 Ensure Cloud SQL Database Instances Have IAM Database Authentication Enabled | CIS Google Cloud Platform Foundation v5.0.0 L1 | GCP | ACCESS CONTROL, MEDIA PROTECTION |
| 8.3.1 Ensure that the Expiration Date is Set for all Keys in Key Vaults using RBAC | CIS Microsoft Azure Foundations v6.0.0 L1 | microsoft_azure | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY |
| 8.3.3 Ensure that the Expiration Date is set for All Secrets in Key Vaults using RBAC | CIS Microsoft Azure Foundations v6.0.0 L1 | microsoft_azure | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY |
| 8.3.4 Ensure that the Expiration Date is set for All Secrets in Key Vaults using access policies (legacy) | CIS Microsoft Azure Foundations v6.0.0 L1 | microsoft_azure | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY |
| ALMA-09-006845 - AlmaLinux OS 9 must have the postfix package installed. | DISA Cloud Linux AlmaLinux OS 9 STIG v1r7 | Unix | ACCESS CONTROL |
| CD16-00-000200 - PostgreSQL must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals. | DISA Crunchy Data Postgres 16 STIG v1r3 PostgreSQLDB | PostgreSQLDB | ACCESS CONTROL |
| MD7X-00-000200 - MongoDB must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals. | DISA MongoDB Enterprise Advanced 7.x STIG v1r2 Unix | Unix | ACCESS CONTROL |
| MYS8-00-000100 - MySQL Database Server 8.0 must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals. | DISA Oracle MySQL 8.0 v2r2 DB | MySQLDB | ACCESS CONTROL |
| O19C-00-000800 - Oracle Database must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals. | DISA Oracle Database 19c STIG v1r3 OracleDB | OracleDB | ACCESS CONTROL |
| SQLI-22-003700 - SQL Server must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals. | DISA Microsoft SQL Server 2022 Instance STIG v1r4 MS_SQLDB | MS_SQLDB | ACCESS CONTROL |
| SQLI-22-003800 - SQL Server must be configured to use the most-secure authentication method available. | DISA Microsoft SQL Server 2022 Instance STIG v1r4 MS_SQLDB | MS_SQLDB | ACCESS CONTROL |