| 1.1.1 - AirWatch - Update firmware to latest version | AirWatch - CIS Apple iOS 8 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 1.1.1 - MobileIron - Update firmware to latest version | MobileIron - CIS Apple iOS 8 v1.0.0 L1 | MDM | CONFIGURATION MANAGEMENT |
| 1.1.4 - AirWatch - Set Auto-lock - 'Inactivity Timeout <= 2' | AirWatch - CIS Apple iOS 8 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 1.1.6 - MobileIron - Disable Passcode Unlock for Fingerprints | MobileIron - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.7 - AirWatch - Disable Access to Control Center on Lock Screen | AirWatch - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.7 - MobileIron - Disable Access to Control Center on Lock Screen | MobileIron - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.8 - AirWatch - Forget Wi-Fi networks to prevent automatic rejoin | AirWatch - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.9 - MobileIron - Turn off Auto-Join for all Wi-Fi networks | MobileIron - CIS Apple iOS 9 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.11 - AirWatch - Turn off Wi-Fi when not needed | AirWatch - CIS Apple iOS 9 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.11 - MobileIron - Turn Off AirDrop Discoverability | MobileIron - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.12 - AirWatch - Turn off VPN when not needed | AirWatch - CIS Apple iOS 9 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 1.1.12 - MobileIron - Turn off Wi-Fi when not needed | MobileIron - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.15 - MobileIron - Turn off Location Services | MobileIron - CIS Apple iOS 9 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.16 - MobileIron - Turn off Location Services | MobileIron - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.17 - MobileIron - Enable Automatic Downloads of App Updates | MobileIron - CIS Apple iOS 9 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 1.1.18 - AirWatch - Enable Find My iPhone/iPad | AirWatch - CIS Apple iOS 9 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.21 - MobileIron - Erase all data before return, recycle, reassignment, or other disposition | MobileIron - CIS Apple iOS 8 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 1.2.3 - AirWatch - Disable Auto Fill for Contact Information | AirWatch - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.2.3 - AirWatch - Disable Auto Fill for Contact Information | AirWatch - CIS Apple iOS 9 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.2.5 - AirWatch - Disable Auto Fill for Credit Card Information | AirWatch - CIS Apple iOS 9 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.2.6 - MobileIron - Delete Saved Password Information | MobileIron - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| 1.2.7 - AirWatch - Delete Saved Credit Card Information | AirWatch - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.2.8 - AirWatch - Turn On Private Browsing When Needed | AirWatch - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.2.9 - AirWatch - Turn On Do Not Track | AirWatch - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 2.1.1 - MobileIron - Set Security to disallow profile removal | MobileIron - CIS Apple iOS 8 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 2.2.5 - AirWatch - Set Minimum number of complex characters | AirWatch - CIS Apple iOS 8 v1.0.0 L2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| 2.2.6 - AirWatch - Set Maximum Auto-lock | AirWatch - CIS Apple iOS 8 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 2.2.6 - MobileIron - Set Maximum Auto-lock | MobileIron - CIS Apple iOS 9 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 2.2.7 - MobileIron - Set Maximum number of failed attempts | MobileIron - CIS Apple iOS 8 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 2.3.1 - AirWatch - Enable Prevent Move for Sensitive Mail Accounts | AirWatch - CIS Apple iOS 9 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 2.3.2 - AirWatch - Require Use Only in Mail for Sensitive Mail Accounts | AirWatch - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 2.3.2 - MobileIron - Require Use Only in Mail for Sensitive Mail Accounts - EMAIL Configurations | MobileIron - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 3.1.1 - AirWatch - Enable 'Require password' | AirWatch - CIS Apple iOS 8 v1.0.0 L1 | MDM | ACCESS CONTROL |
| 3.1.4 - MobileIron - Set the 'minimum number of character sets' | MobileIron - CIS Apple iOS 8 v1.0.0 L2 | MDM | IDENTIFICATION AND AUTHENTICATION |
| 4.1.3 Ensure permissions on /etc/cron.hourly are configured | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.1.4 Ensure permissions on /etc/cron.daily are configured | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.1.9 Ensure at is restricted to authorized users | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.2 Ensure permissions on SSH private host key files are configured | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.4 Ensure SSH access is limited | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.5 Ensure SSH LogLevel is appropriate | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY |
| 4.3.5 Ensure sudo authentication timeout is configured correctly | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL |
| 4.6.1.2 Ensure minimum days between password changes is configured | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION |
| 4.6.2 Ensure system accounts are secured | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.6.3 Ensure default user shell timeout is 900 seconds or less | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL |
| 5.1.1.4 Ensure rsyslog default file permissions are configured | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY, MEDIA PROTECTION |
| 5.1.2.1.1 Ensure systemd-journal-remote is installed | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | AUDIT AND ACCOUNTABILITY, SYSTEM AND INFORMATION INTEGRITY |
| 5.1.2.5 Ensure journald is not configured to send logs to rsyslog | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 6.1.4 Ensure permissions on /etc/group are configured | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 6.2.2 Ensure /etc/shadow password fields are not empty | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.2.10 Ensure local interactive user home directories are configured | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, MEDIA PROTECTION |