| 1.3.4.1 Ensure Secure by Default is selected during the installation | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 2.1 Ensure system configuration is documented and verified regularly | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT |
| 2.1.2 Ensure X Window System is not installed | CIS Aliyun Linux 2 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.1.20 Ensure X window server services are not in use | CIS Red Hat Enterprise Linux 8 STIG v2.0.0 L2 Server | Unix | CONFIGURATION MANAGEMENT |
| 2.1.21 Ensure X window server services are not in use | CIS Linux Mint 22 v1.0.0 L1 Workstation | Unix | CONFIGURATION MANAGEMENT |
| 2.1.22 Ensure X window server services are not in use | CIS AlmaLinux OS 8 v4.0.0 L2 Server | Unix | CONFIGURATION MANAGEMENT |
| 2.1.23 Ensure X window server services are not in use | CIS Debian Linux 12 v2.0.0 L2 Server | Unix | CONFIGURATION MANAGEMENT |
| 2.2.2 Ensure X11 Server components are not installed | CIS Amazon Linux 2 STIG v2.0.1 L1 Server | Unix | CONFIGURATION MANAGEMENT |
| 2.2.2 Ensure X11 Server components are not installed | CIS Amazon Linux 2 STIG v2.0.1 STIG | Unix | CONFIGURATION MANAGEMENT |
| 2.3 Ensure Trusted Execution (TE) policies are locked | CIS IBM AIX 7 v1.2.0 L2 | Unix | CONFIGURATION MANAGEMENT |
| 4.1.1.5 Ensure access on /etc/passwd is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.1.1.17 Ensure access is configured for commands referenced by crontab entries | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.1.2.2 Ensure HOME directories are owned by root or the UID specified in /etc/passwd | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 4.1.2.10 Ensure all directories in root PATH access are configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.4 Ensure all entries in /etc/hosts.equiv are removed | CIS IBM AIX 7 v1.2.0 L2 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.3.2.7 Ensure multicast routing is not in use | CIS IBM AIX 7 v1.2.0 L2 | Unix | CONFIGURATION MANAGEMENT |
| 4.3.2.11 Ensure rwhod is not in use | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.3.4.12 Ensure klogin daemon is not in use | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.3.4.23 Ensure rusersd daemon is not in use | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.4.1.1 Ensure NFS client mounts are disabled in /etc/filesystems | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.4.1.4 Ensure localhost aliases do not exist in /etc/exports | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.5.2 Ensure bcastping is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.5.14 Ensure nfs_use_reserved_ports is enabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.6.1.8 Ensure CDE login screen hostname is masked | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 4.6.1.10 Ensure the file /etc/dt/config/Xservers is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.6.2.1 Ensure root access to ftpd is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.6.3.1 Ensure latest version of openssh is installed | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 4.6.3.7 Ensure sshd HostbasedAuthentication is disabled | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 4.6.3.15 Ensure sshd PermitRootLogin is disabled | CIS IBM AIX 7 v1.2.0 L2 | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 4.6.3.17 Ensure sshd ReKeyLimit is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, MAINTENANCE, SYSTEM AND COMMUNICATIONS PROTECTION |
| 4.6.4.3 Ensure access to /etc/mail/sendmail.cf is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.8.1 Ensure root access is controlled | CIS IBM AIX 7 v1.2.0 L1 | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND SERVICES ACQUISITION |
| 4.8.2 Ensure root user default shell is ksh | CIS IBM AIX 7 v1.2.0 L1 | Unix | CONFIGURATION MANAGEMENT |
| 5.1.6 Ensure all local user accounts have valid stanzas in /etc/security/passwd | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.2.1 Ensure histsize is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.2.2 Ensure minimum password age is configured | CIS IBM AIX 7 v1.2.0 L2 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.2.4 Ensure passwords are controlled by password attributes | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.2.8 Ensure a strong password hashing algorithm is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.2.9 Ensure minimum password length is configured | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.3.3 Ensure user daemon is secured | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.3.4 Ensure user guest is secured | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.3.5 Ensure user lpd is secured | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.3.9 Ensure user uucp is secured | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 5.3.10 Ensure System Accounts cannot access system using ftp. | CIS IBM AIX 7 v1.2.0 L1 | Unix | IDENTIFICATION AND AUTHENTICATION |
| 6.1.2 Ensure sudo logging is active | CIS IBM AIX 7 v1.2.0 L2 | Unix | AUDIT AND ACCOUNTABILITY |
| 6.1.3 Ensure sudo commands use pty | CIS IBM AIX 7 v1.2.0 L2 | Unix | ACCESS CONTROL |
| 7.2 Ensure system firmware updates are installed | CIS IBM AIX 7 v1.2.0 L1 | Unix | RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY |
| GEN005220 - .Xauthority or X*.hosts (or equivalent) file(s) must be used to restrict access to the X server. | DISA STIG Solaris 10 SPARC v2r4 | Unix | CONFIGURATION MANAGEMENT |
| SOL-11.1-060060 - The operating system must employ FIPS-validate or NSA-approved cryptography to implement digital signatures. | DISA Solaris 11 SPARC STIG v3r6 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| SPLK-CL-000175 - Splunk Enterprise forwarders must be configured with Indexer Acknowledgement enabled. | DISA STIG Splunk Enterprise 7.x for Windows v3r2 OS | Windows | CONFIGURATION MANAGEMENT |
