| 2.2 Ensure Trusted Execution Path is enabled | CIS IBM AIX 7 v1.2.0 L2 | Unix | ACCESS CONTROL, SYSTEM AND INFORMATION INTEGRITY |
| 2.5 Disable Generic Security Services (GSS) | CIS Oracle Solaris 11.4 L1 v1.1.0 | Unix | SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 2.8 Disable NIS Client Services | CIS Oracle Solaris 11.4 L1 v1.1.0 | Unix | SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 2.11 Disable automount Service | CIS Oracle Solaris 11.4 L1 v1.1.0 | Unix | SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 3.1 Disable Response to Broadcast ICMPv4 Echo Request | CIS Oracle Solaris 11.4 L1 v1.1.0 | Unix | SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 3.2 Disable Response to ICMP Broadcast Netmask Requests | CIS Oracle Solaris 11.4 L1 v1.1.0 | Unix | SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 3.14 Disable TCP Reverse IP Source Routing | CIS Oracle Solaris 11.4 L1 v1.1.0 | Unix | SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 4.3.1.7 Ensure NIM master is not installed | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.3.2.2 Ensure dhcp client services are not in use | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.3.2.7 Ensure multicast routing is not in use | CIS IBM AIX 7 v1.2.0 L2 | Unix | CONFIGURATION MANAGEMENT |
| 4.3.2.8 Ensure dns server services are not in use | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.3.4.3 Ensure comsat daemon is not in use | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.3.4.7 Ensure exec daemon is not in use | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.3.4.8 Ensure finger daemon is not in use | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.3.4.16 Ensure pcnfsd daemon is not in use | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.3.4.18 Ensure rexd daemon is not in use | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.3.4.19 Ensure rlogin daemon is not in use | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.3.4.25 Ensure shell daemon is not in use | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.3.4.27 Ensure talk daemon is not in use | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.3.4.32 Ensure xmquery daemon is not in use | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.4.1.2 Ensure NFS server services are not in use | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.4.1.3 Ensure NFS client mounts include nosuid and nodev options | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.5.4 Ensure directed_broadcast is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.5.5 Ensure icmpaddressmask is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.5.6 Ensure ipforwarding is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.5.7 Ensure ip6forwarding is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.5.8 Ensure ipignoreredirects is enabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.5.9 Ensure ipsendredirects is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.5.10 Ensure ipsrcrouteforward is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.5.11 Ensure ipsrcrouterecv is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.5.16 Ensure tcp_pmtu_discover is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.5.17 Ensure tcp_tcpsecure is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.5.19 Ensure icmptimestamp is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.6.1.4 Ensure dtspc is not available | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.6.1.7 Ensure CDE screensaver lock is enabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL |
| 4.6.3.8 Ensure sshd IgnoreRhosts is enabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 4.6.3.13 Ensure sshd PermitEmptyPasswords is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 4.6.3.14 Ensure sshd PermitRootLogin is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 4.6.3.16 Ensure sshd PermitUserEnvironment is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.6.4.2 Ensure sendmail PrivacyOptions is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.7.2 Ensure logindelay is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL |
| 4.8.5 Ensure root user path does not include current working directory | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 5.1.1 Ensure all local user accounts have a hashed password | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.1.4 Ensure an Inventory of Administrator accounts is established and maintained | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL |
| 5.2.3 Ensure password history expiry is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.2.4 Ensure passwords are controlled by password attributes | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.2.9 Ensure minimum password length is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.3.9 Ensure user uucp is secured | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.3.10 Ensure System Accounts cannot access system using ftp. | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 8.1.3 Ensure modification to TE system is audited | CIS IBM AIX 7 v1.2.0 L1 | Unix | AUDIT AND ACCOUNTABILITY |
