| 1.2 Set 'Prevent Bypassing SmartScreen Filter Warnings' to 'Enabled' | CIS IE 9 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| 1.4 Set 'Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet' to 'Enabled' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.5 Configure 'Do not allow users to enable or disable add-ons' | CIS IE 11 v1.0.0 | Windows | ACCESS CONTROL |
| 2.1 Set 'Disable Per- User Installation of ActiveX Controls' to 'Enabled' | CIS IE 9 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 3.4 Set 'Days to keep pages in History' to '40' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 4.2 Set 'Update check interval (in days):' to 'Enabled:30' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| 5.2 Set 'Check for server certificate revocation' to 'Enabled' | CIS IE 11 v1.0.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 5.2 Set 'Check for server certificate revocation' to 'Enabled' | CIS IE 9 v1.0.0 | Windows | IDENTIFICATION AND AUTHENTICATION |
| 6.1 Set 'Turn off browser geolocation' to 'Enabled' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 7.1 Set 'Restrict ActiveX Install' to 'Enabled' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.1 Set 'Restrict File Download' to 'Enabled' - reserved | CIS IE 9 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 7.2 Set 'Notification bar' to 'Enabled' -iexplore.exe | CIS IE 9 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 7.2 Set 'Scripted Window Security Restrictions' to 'Enabled' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 7.3 Set 'Restrict ActiveX Install' to 'Enabled' - (Reserved) | CIS IE 9 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.3 Set 'Restrict ActiveX Install' to 'Enabled' - explorer.exe | CIS IE 9 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.4 Set 'Consistent Mime Handling' to 'Enabled' - iexplore.exe | CIS IE 9 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.8 Set 'MK Protocol Security Restriction' to 'Enabled' - (Reserved) | CIS IE 9 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.1.1 Set 'Access data sources across domains' to 'Enabled:Disable' | CIS IE 9 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.1.1 Set 'Java permissions' to 'Enabled:Disable Java' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.1.2 Set 'Allow drag and drop or copy and paste files' to 'Enabled:Disable' | CIS IE 9 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.1.2 Set 'Allow paste operations via script' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.1.3 Set 'Allow font downloads' to 'Enabled:Disable' | CIS IE 9 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.1.3 Set 'Protected Mode' to 'Enabled:Enable' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.1.4 Set 'Allow installation of desktop items' to 'Enabled:Disable' | CIS IE 9 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.1.5 Set 'Allow paste operations via script' to 'Enabled:Disable' | CIS IE 9 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.1.5 Set 'Run .NET Framework-reliant components signed with Authenticode' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.1.7 Set 'Scriptlets' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.1.10 Set 'Run .NET Framework-reliant components not signed with Authenticode' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.1.12 Set 'Java permissions' to 'Enabled:Disable Java' | CIS IE 9 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.1.19 Set 'Use Pop- up Blocker' to 'Enabled:Enable' | CIS IE 9 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.1.28 Set 'Enable dragging of content from different domains across windows' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.1.32 Configure 'First-Run Opt-In' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.3.2 Set 'Allow drag and drop or copy and paste files' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.3.12 Set 'Launching programs and unsafe files' to 'Enabled:Prompt' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| 8.3.16 Set 'Enable MIME Sniffing' to 'Enabled:Enable' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| 8.3.18 Set 'Allow Binary and Script Behaviors' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.3.26 Set 'Run ActiveX controls and plugins' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.3.34 Set 'Include local directory path when uploading files to a server' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.3.39 Configure 'First-Run Opt-In' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.4.2 Set 'Use SmartScreen Filter' to 'Enabled:Enable' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| 8.5.1 Set 'Java permissions' to 'Enabled:High safety' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.5.2 Set 'Initialize and script ActiveX controls not marked as safe' to 'Enabled:Disable' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.6.1 Set 'Use SmartScreen Filter' to 'Enabled:Enable' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| 8.8.2 Set 'Only allow approved domains to use ActiveX controls without prompt' to 'Enabled:Enable' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.9.1 Set 'Java permissions' to 'Enabled:Disable Java' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 8.9.2 Set 'Use SmartScreen Filter' to 'Enabled:Enable' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND INFORMATION INTEGRITY |
| 8.13 Set 'Security Zones: Use only machine settings' to 'Enabled' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
| 9.7 Set 'Prevent changing proxy settings' to 'Enabled' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 9.11 Configure 'Disable changing connection settings' | CIS IE 11 v1.0.0 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| 9.12 Set 'Turn off Crash Detection' to 'Enabled' | CIS IE 11 v1.0.0 | Windows | CONFIGURATION MANAGEMENT |
