| 2.3 Ensure Trusted Execution (TE) policies are locked | CIS IBM AIX 7 v1.2.0 L2 | Unix | CONFIGURATION MANAGEMENT |
| 2.5 Create Separate Partition for /var | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.7 Create Separate Partition for /var/log | CIS Debian Linux 7 L1 v1.0.0 | Unix | AUDIT AND ACCOUNTABILITY |
| 2.9 Create Separate Partition for /home | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.25 Disable Automounting | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 4.2 Enable XD/NX Support on 32-bit x86 Systems | CIS Debian Linux 7 L1 v1.0.0 | Unix | SYSTEM AND INFORMATION INTEGRITY |
| 4.2.4 Ensure all entries in /etc/hosts.equiv are removed | CIS IBM AIX 7 v1.2.0 L2 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.6.2.1 Ensure root access to ftpd is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.6.3.1 Ensure latest version of openssh is installed | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 4.6.3.7 Ensure sshd HostbasedAuthentication is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 4.6.3.15 Ensure sshd PermitRootLogin is disabled | CIS IBM AIX 7 v1.2.0 L2 | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 4.6.3.17 Ensure sshd ReKeyLimit is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION |
| 4.6.4.3 Ensure access to /etc/mail/sendmail.cf is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.8.1 Ensure root access is controlled | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND SERVICES ACQUISITION |
| 4.8.2 Ensure root user default shell is ksh | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 5.1.1 Ensure NIS is not installed | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 5.1.2 Ensure rsh server is not enabled - shell | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 5.1.6 Ensure all local user accounts have valid stanzas in /etc/security/passwd | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.1.8 Ensure xinetd is not enabled | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 5.2.1 Ensure histsize is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.2.2 Ensure minimum password age is configured | CIS IBM AIX 7 v1.2.0 L2 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.2.8 Ensure a strong password hashing algorithm is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.3 Ensure daytime is not enabled | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 5.3.3 Ensure user daemon is secured | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.3.4 Ensure user guest is secured | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.3.5 Ensure user lpd is secured | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.5 Ensure discard is not enabled | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 5.6 Ensure time is not enabled | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 6.1.2 Ensure sudo logging is active | CIS IBM AIX 7 v1.2.0 L2 | Unix | AUDIT AND ACCOUNTABILITY |
| 6.1.3 Ensure sudo commands use pty | CIS IBM AIX 7 v1.2.0 L2 | Unix | ACCESS CONTROL |
| 6.3 Ensure print server is not enabled | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 6.5 Configure Network Time Protocol (NTP) - restrict -4 | CIS Debian Linux 7 L1 v1.0.0 | Unix | AUDIT AND ACCOUNTABILITY |
| 6.7 Ensure NFS and RPC are not enabled - nfs-kernel-server | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 6.13 Ensure HTTP Proxy Server is not enabled | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 7.2 Ensure system firmware updates are installed | CIS IBM AIX 7 v1.2.0 L1 | Unix | RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY |
| 7.2.2 Disable ICMP Redirect Acceptance - net.ipv4.conf.all.accept_redirects | CIS Debian Linux 7 L1 v1.0.0 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.2.7 Enable RFC-recommended Source Route Validation - net.ipv4.conf.default.rp_filter | CIS Debian Linux 7 L1 v1.0.0 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.2.8 Enable TCP SYN Cookies | CIS Debian Linux 7 L1 v1.0.0 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.3.3 Disable IPv6 - net.ipv6.conf.all.disable_ipv6 | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.5.3 Disable RDS | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 7.7 Ensure Firewall is active - iptables | CIS Debian Linux 7 L1 v1.0.0 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.7 Ensure Firewall is active - iptables-persistent run level 4 | CIS Debian Linux 7 L1 v1.0.0 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.7 Ensure Firewall is active - iptables-persistent run level 5 | CIS Debian Linux 7 L1 v1.0.0 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 10.2 Disable System Accounts | CIS Debian Linux 7 L1 v1.0.0 | Unix | ACCESS CONTROL |
| 11.1 Set Warning Banner for Standard Login Services - /etc/issue.net content | CIS Debian Linux 7 L1 v1.0.0 | Unix | ACCESS CONTROL |
| 11.2 Remove OS Information from Login Warning Banners - /etc/issue.net | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 12.8 Find Un-owned Files and Directories | CIS Debian Linux 7 L1 v1.0.0 | Unix | ACCESS CONTROL |
| 13.9 Check Permissions on User .netrc Files | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 13.12 Check That Users Are Assigned Valid Home Directories | CIS Debian Linux 7 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 13.18 Check for Presence of User .netrc Files | CIS Debian Linux 7 L1 v1.0.0 | Unix | IDENTIFICATION AND AUTHENTICATION |
