| 1.1.2.4 Ensure nosuid option set on /tmp partition | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 1.1.2.4.2 Ensure nodev option set on /var partition | CIS Debian Linux 13 v1.1.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 1.1.2.4.3 Ensure nosuid option set on /var partition | CIS Debian Linux 13 v1.1.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 1.1.5.2 Ensure nodev option set on /var/log partition | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 1.4 Ensure Data Cluster Initialized Successfully | CIS PostgreSQL 17 v1.1.0 L1 OS Linux Unix | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 1.4.1 Ensure permissions on bootloader config are configured | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 2.3 Ensure 'Cross DB Ownership Chaining' Server Configuration Option is set to '0' | CIS Microsoft SQL Server 2019 v1.6.0 L1 Database Engine MS_SQLDB | MS_SQLDB | ACCESS CONTROL, MEDIA PROTECTION |
| 2.12.2 Ensure Guest Access to Shared Folders Is Disabled | CIS Apple macOS 13.0 Ventura v4.0.0 L1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 3.5 Ensure Access to Audit Records Is Controlled | CIS Apple macOS 13.0 Ventura v4.0.0 L1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 3.5 Ensure Access to Audit Records Is Controlled | CIS Apple macOS 15.0 Sequoia v2.1.0 L1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 3.9 Ensure Windows BUILTIN groups are not SQL Logins | CIS Microsoft SQL Server 2019 v1.6.0 L1 AWS RDS MS_SQLDB | MS_SQLDB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.1.2 Ensure permissions on /etc/crontab are configured | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.6 Restrict Access to SYSCAT.COLUMNS | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.48 Restrict Access to SYSSTAT.COLUMNS | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.3.2 Restrict Access to SYSIBM.SYSAUDITUSE | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.3.4 Restrict Access to SYSIBM.SYSCOLDIST | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.3.6 Ensure access to the su command is restricted | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 4.3.11 Restrict Access to SYSIBM.SYSDBAUTH | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.3.12 Restrict Access to SYSIBM.SYSEVENTS | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.3.14 Restrict Access to SYSIBM.SYSEXTTAB | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.3.18 Restrict Access to SYSIBM.SYSPLANAUTH | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.3.21 Restrict Access to SYSIBM.SYSROLES | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.3.25 Restrict Access to SYSIBM.SYSSCHEMAAUTH | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.3.33 Restrict Access to SYSIBM.SYSSECURITYPOLICYEXEMPTIONS | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.3.37 Restrict Access to SYSIBM.SYSSTMT | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.3.41 Restrict Access to SYSIBM.SYSUSEROPTIONS | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.4.2 Restrict Access to SYSIBMADM.OBJECTOWNERS | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.7 Ensure Row Level Security (RLS) is configured correctly | CIS PostgreSQL 17 v1.1.0 L1 Database PostgreSQLDB | PostgreSQLDB | ACCESS CONTROL, MEDIA PROTECTION |
| 5.1.3 Ensure all logfiles have appropriate permissions and ownership | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 5.1.5 Ensure Appropriate Permissions Are Enabled for System Wide Applications | CIS Apple macOS 15.0 Sequoia v2.1.0 L1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 5.4.2.6 Ensure root user umask is configured | CIS Debian Linux 13 v1.1.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 5.7 Secure Permissions for All Authentication Plugins | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 6.1.1 Ensure permissions on /etc/passwd are configured | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 6.1.2 Ensure permissions on /etc/passwd are configured | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 6.1.3 Ensure permissions on /etc/passwd- are configured | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 6.1.5 Secure SECADM Authority | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 6.1.7 Secure SQLADM Authority | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 6.1.8 Ensure permissions on /etc/gshadow are configured | CIS Amazon Linux 2023 v1.0.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 6.1.10 Secure WLMADM Authority | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 6.1.11 Secure CREATAB Authority | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 6.1.13 Secure CONNECT Authority | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 6.1.15 Secure EXTERNALROUTINE Authority | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 6.2.1 Review Users, Groups, and Roles | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 6.2.2 Review Roles | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 6.2.5 Review Roles Granted to PUBLIC | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 6.3.3 Review Column Mask Logic According to Policy | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 7.1.10 Ensure access to /etc/security/opasswd is configured | CIS Debian Linux 13 v1.1.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 7.1.11 Ensure world writable files and directories are secured | CIS Debian Linux 13 v1.1.0 L1 Server | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 7.6 Ensure No Users Have Wildcard Hostnames | CIS Oracle MySQL Community Server 9.7 v1.0.0 L1 MySQL RDBMS on Linux MySQLDB | MySQLDB | ACCESS CONTROL, MEDIA PROTECTION |
| 9.1 Leverage the Least Privilege Principle | CIS IBM DB2 11 v1.2.0 Database Level 1 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
