| 1.3 AZLX-23-000115 | CIS Amazon Linux 2023 STIG v1.0.0 CAT I | Unix | CONFIGURATION MANAGEMENT |
| 1.8 RHEL-09-211045 | CIS Red Hat Enterprise Linux 9 STIG v1.0.0 CAT I | Unix | ACCESS CONTROL |
| 1.13 RHEL-10-001050 | CIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT I | Unix | CONFIGURATION MANAGEMENT |
| 1.18 SQLI-22-006700 | CIS Microsoft SQL Server 2022 Instance STIG v1.0.0 CAT I MS_SQLDB | MS_SQLDB | CONFIGURATION MANAGEMENT |
| 1.19 PHTN-40-000040 | CIS VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v1.0.0 CAT I | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.21 RHEL-10-200070 | CIS Red Hat Enterprise Linux 10 STIG v1.0.0 CAT I | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.22 O19C-00-008000 | CIS Oracle Database 19c STIG v1.1.0 CAT I OracleDB | OracleDB | CONFIGURATION MANAGEMENT |
| 1.24 CISC-RT-000310 | CIS Cisco IOS XR Router RTR STIG v1.0.0 CAT I | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.25 CISC-RT-000310 | CIS Cisco IOS XE Router RTR STIG v1.1.0 CAT I | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.26 CISC-ND-001450 | CIS Cisco IOS XR Router NDM STIG v1.0.0 CAT I | Cisco | AUDIT AND ACCOUNTABILITY |
| 1.30 SQLI-22-008000 | CIS Microsoft SQL Server 2022 Instance STIG v1.0.0 CAT I MS_SQLDB | MS_SQLDB | IDENTIFICATION AND AUTHENTICATION |
| 1.42 CISC-ND-001450 | CIS Cisco IOS Switch NDM STIG v1.1.0 CAT I | Cisco | AUDIT AND ACCOUNTABILITY |
| 1.42 EX19-MB-000134 | CIS Microsoft Exchange 2019 Mailbox Server STIG v1.0.0 CAT I | Windows | SYSTEM AND INFORMATION INTEGRITY |
| 1.46 PHTN-40-000130 | CIS VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v1.0.0 CAT I | Unix | CONFIGURATION MANAGEMENT |
| 1.95 APPL-14-002069 | CIS Apple macOS 14 Sonoma STIG v1.0.0 CAT I | Unix | ACCESS CONTROL |
| 1.113 WN16-CC-000250 | CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT I | Windows | CONFIGURATION MANAGEMENT |
| 1.114 WN22-CC-000210 | CIS Microsoft Windows Server 2022 STIG v3.0.0 MS CAT I | Windows | CONFIGURATION MANAGEMENT |
| 1.147 WN22-DC-000010 | CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT I | Windows | ACCESS CONTROL |
| 1.153 WN16-DC-000080 | CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT I | Windows | ACCESS CONTROL |
| 1.154 WN16-DC-000090 | CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT I | Windows | ACCESS CONTROL |
| 1.174 WN16-DC-000300 | CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT I | Windows | IDENTIFICATION AND AUTHENTICATION |
| 1.175 WN22-DC-000300 | CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT I | Windows | IDENTIFICATION AND AUTHENTICATION |
| 1.235 WN16-SO-000360 | CIS Microsoft Windows Server 2016 STIG v4.0.0 DC CAT I | Windows | IDENTIFICATION AND AUTHENTICATION |
| 1.257 WN16-UR-000090 | CIS Microsoft Windows Server 2016 STIG v4.0.0 MS CAT I | Windows | ACCESS CONTROL |
| 1.259 WN22-UR-000060 | CIS Microsoft Windows Server 2022 STIG v3.0.0 DC CAT I | Windows | ACCESS CONTROL |
| APPL-11-002063 - The macOS system must enforce access restrictions. | DISA STIG Apple macOS 11 v1r5 | Unix | CONFIGURATION MANAGEMENT |
| APPL-11-002064 - The macOS system must have the security assessment policy subsystem enabled. | DISA STIG Apple macOS 11 v1r5 | Unix | CONFIGURATION MANAGEMENT |
| APPL-12-002063 - The macOS system must enforce access restrictions. | DISA STIG Apple macOS 12 v1r9 | Unix | CONFIGURATION MANAGEMENT |
| APPL-14-002069 - The macOS system must require administrator privileges to modify systemwide settings. | DISA Apple macOS 14 Sonoma STIG v2r4 | Unix | ACCESS CONTROL |
| AZLX-23-001211 - The Amazon Linux 2023 SSH client must be configured to use only DOD-approved Message Authentication Codes (MACs) employing FIPS 140-3-validated cryptographic hash algorithms to protect the confidentiality of SSH client connections. | DISA Amazon Linux 2023 STIG v1r4 | Unix | ACCESS CONTROL |
| CASA-ND-001150 - The Cisco ASA must be configured to implement cryptographic mechanisms using a FIPS 140-2 approved algorithm to protect the confidentiality of remote maintenance sessions. | DISA STIG Cisco ASA NDM v2r5 | Cisco | MAINTENANCE |
| CASA-ND-001410 - The Cisco ASA must be configured to send log data to at least two central log servers for the purpose of forwarding alerts to organization-defined personnel and/or the firewall administrator. | DISA STIG Cisco ASA NDM v2r5 | Cisco | AUDIT AND ACCOUNTABILITY |
| CNTR-K8-002620 - Kubernetes API Server must disable basic authentication to protect information in transit. | DISA Kubernetes STIG v2r6 | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| FFOX-00-000002 - Firefox must be configured to allow only TLS 1.2 or above. | DISA STIG Mozilla Firefox MacOS v6r7 | Unix | ACCESS CONTROL |
| FFOX-00-000002 - Firefox must be configured to allow only TLS 1.2 or above. | DISA STIG Mozilla Firefox Windows v6r7 | Windows | ACCESS CONTROL |
| GOOG-16-012500 - Google Android 16 must be configured to disable 'Private Space' use - Private Space use. | AirWatch - DISA Google Android 16 COBO STIG v1r3 | MDM | CONFIGURATION MANAGEMENT |
| JUEX-NM-000520 - The Juniper EX switch must be configured to implement cryptographic mechanisms using a FIPS 140-2/140-3 approved algorithm to protect the confidentiality of remote maintenance sessions. | DISA Juniper EX Series Network Device Management v2r4 | Juniper | MAINTENANCE |
| JUEX-RT-000370 - The Juniper perimeter router must be configured to deny network traffic by default and allow network traffic by exception. | DISA Juniper EX Series Router v2r1 | Juniper | SYSTEM AND COMMUNICATIONS PROTECTION |
| MADB-10-008700 - MariaDB must implement cryptographic mechanisms preventing the unauthorized disclosure of organization-defined information at rest on organization-defined information system components. | DISA MariaDB Enterprise 10.x STIG v2r5 MySQLDB | MySQLDB | SYSTEM AND COMMUNICATIONS PROTECTION |
| PHTN-40-000079 - The Photon operating system must implement only approved ciphers to protect the integrity of remote access sessions. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r2 | Unix | ACCESS CONTROL |
| PHTN-40-000105 - The Photon operating system must enable symlink access control protection in the kernel. | DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r2 | Unix | ACCESS CONTROL |
| SQLI-22-003700 - SQL Server must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals. | DISA Microsoft SQL Server 2022 Instance STIG v1r4 MS_SQLDB | MS_SQLDB | ACCESS CONTROL |
| WN11-00-000070 - Only accounts responsible for the administration of a system must have Administrator rights on the system. | DISA Microsoft Windows 11 STIG v2r8 | Windows | ACCESS CONTROL |
| WN11-CC-000185 - The default autorun behavior must be configured to prevent autorun commands. | DISA Microsoft Windows 11 STIG v2r8 | Windows | CONFIGURATION MANAGEMENT |
| WN22-DC-000010 - Windows Server 2022 must only allow administrators responsible for the domain controller to have Administrator rights on the system. | DISA Microsoft Windows Server 2022 STIG v2r8 | Windows | ACCESS CONTROL |
| WN22-UR-000020 - Windows Server 2022 Act as part of the operating system user right must not be assigned to any groups or accounts. | DISA Microsoft Windows Server 2022 STIG v2r8 | Windows | ACCESS CONTROL |
| WN22-UR-000060 - Windows Server 2022 create a token object user right must not be assigned to any groups or accounts. | DISA Microsoft Windows Server 2022 STIG v2r8 | Windows | ACCESS CONTROL |
| WN25-DC-000010 - Windows Server 2025 must only allow administrators responsible for the domain controller to have Administrator rights on the system. | DISA Microsoft Windows Server 2025 STIG v1r1 | Windows | ACCESS CONTROL |
| WN25-DC-000110 - Windows Server 2025 organization created Active Directory Organizational Unit (OU) objects must have proper access control permissions. | DISA Microsoft Windows Server 2025 STIG v1r1 | Windows | ACCESS CONTROL |
| WN25-MS-000010 - Windows Server 2025 must only allow administrators responsible for the member server or stand-alone or nondomain-joined system to have Administrator rights on the system. | DISA Microsoft Windows Server 2025 STIG v1r1 | Windows | ACCESS CONTROL |
