| 1.40 WN16-00-000412 | CIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT II | Windows | CONFIGURATION MANAGEMENT |
| 1.40 WN19-00-000400 | CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT II | Windows | CONFIGURATION MANAGEMENT |
| 1.40 WN22-00-000400 | CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT II | Windows | CONFIGURATION MANAGEMENT |
| 1.97 WN16-CC-000040 | CIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT III | Windows | CONFIGURATION MANAGEMENT |
| 1.97 WN22-CC-000030 | CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT III | Windows | CONFIGURATION MANAGEMENT |
| 2.3.3.9 Ensure Media Sharing Is Disabled | CIS Apple macOS 15.0 Sequoia v2.1.0 L2 | Unix | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 4.1.3 Review Lockdown Mode | MobileIron - CIS Apple iOS 17 v1.1.0 End User Owned L2 | MDM | CONFIGURATION MANAGEMENT |
| 4.1.3 Review Lockdown Mode | AirWatch - CIS Apple iOS 17 Institution Owned L2 | MDM | CONFIGURATION MANAGEMENT |
| 4.1.3 Review Lockdown Mode | AirWatch - CIS Apple iOS 18 v2.0.0 L2 Institution Owned | MDM | CONFIGURATION MANAGEMENT |
| 4.1.3 Review Lockdown Mode | MobileIron - CIS Apple iOS 18 v2.0.0 L2 Institution Owned | MDM | CONFIGURATION MANAGEMENT |
| 4.1.3 Review Lockdown Mode | AirWatch - CIS Apple iOS 26 v1.0.0 L2 End User Owned | MDM | CONFIGURATION MANAGEMENT |
| 4.1.3 Review Lockdown Mode | MobileIron - CIS Apple iOS 26 v1.0.0 L2 End User Owned | MDM | CONFIGURATION MANAGEMENT |
| 4.1.3 Review Lockdown Mode | AirWatch - CIS Apple iPadOS 18 v2.0.0 L2 End User Owned | MDM | CONFIGURATION MANAGEMENT |
| 4.1.3 Review Lockdown Mode | AirWatch - CIS Apple iPadOS 26 v1.0.0 L2 Institutionally Owned | MDM | CONFIGURATION MANAGEMENT |
| 4.1.3 Review Lockdown Mode | MobileIron - CIS Apple iPadOS 26 v1.0.0 L2 End User Owned | MDM | CONFIGURATION MANAGEMENT |
| 4.1.3 Review Lockdown Mode | AirWatch - CIS Apple iOS 17 v1.1.0 End User Owned L2 | MDM | CONFIGURATION MANAGEMENT |
| 4.1.3 Review Lockdown Mode | AirWatch - CIS Apple iPadOS 17 Institutionally Owned L2 | MDM | CONFIGURATION MANAGEMENT |
| 4.1.3 Review Lockdown Mode | MobileIron - CIS Apple iPadOS 17 Institutionally Owned L2 | MDM | CONFIGURATION MANAGEMENT |
| 4.1.6 Ensure 'Stolen Device Protection' Is Enabled | AirWatch - CIS Apple iOS 17 v1.1.0 End User Owned L2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| 4.1.6 Ensure 'Stolen Device Protection' Is Enabled | MobileIron - CIS Apple iPadOS 26 v1.0.0 L2 End User Owned | MDM | IDENTIFICATION AND AUTHENTICATION |
| 4.1.6 Ensure 'Stolen Device Protection' Is Enabled | AirWatch - CIS Apple iPadOS 18 v2.0.0 L2 End User Owned | MDM | IDENTIFICATION AND AUTHENTICATION |
| 5.3.1.1 Ensure latest version of pam is installed | CIS Ubuntu Linux 20.04 LTS v3.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.3.1.1 Ensure latest version of pam is installed | CIS Ubuntu Linux 20.04 LTS v3.0.0 L1 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 18.10.90.2 (L1) Ensure 'Allow networking in Windows Sandbox' is set to 'Disabled' | CIS Microsoft Windows 10 EMS Gateway v3.0.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| 18.10.92.3 Ensure 'Allow networking in Windows Sandbox' is set to 'Disabled' | CIS Microsoft Windows 11 Stand-alone v5.0.0 L1 | Windows | CONFIGURATION MANAGEMENT |
| AIOS-13-001800 - Apple iOS/iPadOS must not display notifications when the device is locked. | MobileIron - DISA Apple iOS/iPadOS 13 v2r1 | MDM | CONFIGURATION MANAGEMENT |
| AIOS-13-011800 - Apple iOS/iPadOS must implement the management setting: not have any Family Members in Family Sharing. | MobileIron - DISA Apple iOS/iPadOS 13 v2r1 | MDM | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION |
| AIOS-14-010000 - Apple iOS/iPadOS must implement the management setting: not have any Family Members in Family Sharing. | AirWatch - DISA Apple iOS/iPadOS 14 v1r3 | MDM | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION |
| AIOS-17-012800 - Apple iOS/iPadOS 17 must disable allow setting up new nearby devices. | MobileIron - DISA Apple iOS/iPadOS 17 v2r2 | MDM | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| AIOS-18-010500 - Apple iOS/iPadOS 18 must implement the management setting: limit Ad Tracking. | AirWatch - DISA Apple iOS/iPadOS 18 v2r3 | MDM | SYSTEM AND COMMUNICATIONS PROTECTION |
| AIOS-18-011600 - Apple iOS/iPadOS 18 must implement the management setting: not have any Family Members in Family Sharing. | AirWatch - DISA Apple iOS/iPadOS 18 v2r3 | MDM | IDENTIFICATION AND AUTHENTICATION |
| AIOS-18-014900 - Apple iOS/iPadOS 18 must disable the installation of alternative marketplace apps. | AirWatch - DISA Apple iOS/iPadOS 18 v2r3 | MDM | CONFIGURATION MANAGEMENT |
| AIOS-18-014900 - Apple iOS/iPadOS 18 must disable the installation of alternative marketplace apps. | MobileIron - DISA Apple iOS/iPadOS 18 v2r3 | MDM | CONFIGURATION MANAGEMENT |
| AIOS-18-017200 - Apple iOS/iPadOS 18 must disable the Apple Intelligence feature: Image Wand. | MobileIron - DISA Apple iOS/iPadOS 18 v2r3 | MDM | CONFIGURATION MANAGEMENT |
| AIOS-18-018000 - DOD Apple iOS/iPadOS 18 devices must disable screenshots and screen recordings. | AirWatch - DISA Apple iOS/iPadOS 18 v2r3 | MDM | CONFIGURATION MANAGEMENT |
| AIOS-26-011600 - Apple iOS/iPadOS 26 must implement the management setting: not have any Family Members in Family Sharing. | MobileIron - DISA Apple iOS/iPadOS 26 v1r3 | MDM | IDENTIFICATION AND AUTHENTICATION |
| AIOS-26-017400 - Apple iOS/iPadOS 26 must disable Apple Intelligence feature: generate new Genmoji. | AirWatch - DISA Apple iOS/iPadOS 26 v1r3 | MDM | CONFIGURATION MANAGEMENT |
| ESXI-80-000217 - The ESXi host must configure virtual switch security policies to reject Media Access Control (MAC) address changes. | DISA VMware vSphere 8.0 ESXi STIG v2r3 VMware | VMware | CONFIGURATION MANAGEMENT |
| GOOG-17-005800 - Google Android 17 must be configured to not display the following (work profile) notifications when the device is locked: [selection: | MobileIron - DISA Google Android 17 COBO STIG v1r1 | MDM | ACCESS CONTROL |
| GOOG-17-005800 - Google Android 17 must be configured to not display the following (work profile) notifications when the device is locked: [selection: | MobileIron - DISA Google Android 17 COPE STIG v1r1 | MDM | ACCESS CONTROL |
| JUSX-IP-000017 - The Juniper Networks SRX Series Gateway IDPS must protect against or limit the effects of known and unknown types of Denial of Service (DoS) attacks by employing rate-based attack prevention behavior analysis. | DISA Juniper SRX Services Gateway IDPS v2r1 | Juniper | SYSTEM AND COMMUNICATIONS PROTECTION |
| OL09-00-000200 - OL 9 must have policycoreutils package installed. | DISA Oracle Linux 9 STIG v1r6 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| WN10-00-000170 - The Server Message Block (SMB) v1 protocol must be disabled on the SMB client. | DISA Microsoft Windows 10 STIG v3r6 | Windows | CONFIGURATION MANAGEMENT |
| WN10-UR-000085 - The Deny log on locally user right on workstations must be configured to prevent access from highly privileged domain accounts on domain systems and unauthenticated access on all systems. | DISA Microsoft Windows 10 STIG v3r6 | Windows | ACCESS CONTROL |
| WN16-CC-000040 - Internet Protocol version 6 (IPv6) source routing must be configured to the highest protection level to prevent IP source routing. | DISA Microsoft Windows Server 2016 STIG v2r10 | Windows | CONFIGURATION MANAGEMENT |
| WN22-00-000400 - Windows Server 2022 must have the Server Message Block (SMB) v1 protocol disabled on the SMB client. | DISA Microsoft Windows Server 2022 STIG v2r11 | Windows | CONFIGURATION MANAGEMENT |
| WN22-CC-000040 - Windows Server 2022 source routing must be configured to the highest protection level to prevent Internet Protocol (IP) source routing. | DISA Microsoft Windows Server 2022 STIG v2r8 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000030 - Windows Server 2025 Internet Protocol version 6 (IPv6) source routing must be configured to the highest protection level to prevent IP source routing. | DISA Microsoft Windows Server 2025 STIG v1r1 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000040 - Windows Server 2025 source routing must be configured to the highest protection level to prevent Internet Protocol (IP) source routing. | DISA Microsoft Windows Server 2025 STIG v1r4 | Windows | CONFIGURATION MANAGEMENT |
| WN25-CC-000040 - Windows Server 2025 source routing must be configured to the highest protection level to prevent Internet Protocol (IP) source routing. | DISA Microsoft Windows Server 2025 STIG v1r1 | Windows | CONFIGURATION MANAGEMENT |
