| 1.1 APPL-15-000001 | CIS Apple macOS 15 Sequoia STIG v1.0.0 CAT II | Unix | ACCESS CONTROL |
| 1.1.7 - MobileIron - Forget Wi-Fi networks to prevent automatic rejoin | MobileIron - CIS Apple iOS 9 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.1.7.1 Ensure blur snapshot on iOS task switcher is set to enabled | CIS Zoom L2 v1.0.0 | Zoom | CONFIGURATION MANAGEMENT |
| 1.1.8 - MobileIron - Forget Wi-Fi networks to prevent automatic rejoin | MobileIron - CIS Apple iOS 8 v1.0.0 L2 | MDM | ACCESS CONTROL |
| 1.6 Ensure Software Update Deferment Is Less Than or Equal to 30 Days | CIS Apple macOS 26 Tahoe v1.1.0 L1 | Unix | RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY |
| 1.6 Ensure Software Update Deferment Is Less Than or Equal to 30 Days | CIS Apple macOS 15.0 Sequoia v2.1.0 L1 | Unix | RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY |
| 1.7 Ensure Software Update Deferment Is Less Than or Equal to 30 Days | CIS Apple macOS 13.0 Ventura v4.0.0 L1 | Unix | RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY |
| 1.7 Ensure Software Update Deferment Is Less Than or Equal to 30 Days | CIS Apple macOS 14.0 Sonoma v3.1.0 L1 | Unix | RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY |
| 1.7 Ensure Software Update Deferment Is Less Than or Equal to 30 Days | CIS Apple macOS 11.0 Big Sur v4.0.0 L1 | Unix | RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY |
| 1.7 Ensure Software Update Deferment Is Less Than or Equal to 30 Days | CIS Apple macOS 10.15 Catalina v3.0.0 L1 | Unix | RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY |
| 1.44 WN11-00-000395 | CIS Microsoft Windows 11 STIG v1.2.0 CAT II | Windows | CONFIGURATION MANAGEMENT |
| 1.74 APPL-14-002021 | CIS Apple macOS 14 Sonoma STIG v1.0.0 CAT II | Unix | SYSTEM AND INFORMATION INTEGRITY |
| 1.74 APPL-26-002021 | CIS Apple macOS 26 Tahoe STIG v1.0.0 CAT II | Unix | SYSTEM AND INFORMATION INTEGRITY |
| 1.76 APPL-26-002023 | CIS Apple macOS 26 Tahoe STIG v1.0.0 CAT II | Unix | CONFIGURATION MANAGEMENT |
| 1.77 APPL-15-002023 | CIS Apple macOS 15 Sequoia STIG v1.0.0 CAT II | Unix | CONFIGURATION MANAGEMENT |
| 1.88 APPL-26-002052 | CIS Apple macOS 26 Tahoe STIG v1.0.0 CAT II | Unix | CONFIGURATION MANAGEMENT |
| 1.89 APPL-15-002052 | CIS Apple macOS 15 Sequoia STIG v1.0.0 CAT II | Unix | CONFIGURATION MANAGEMENT |
| 1.108 APPL-26-002210 | CIS Apple macOS 26 Tahoe STIG v1.0.0 CAT II | Unix | CONFIGURATION MANAGEMENT |
| 1.109 APPL-14-002210 | CIS Apple macOS 14 Sonoma STIG v1.0.0 CAT II | Unix | CONFIGURATION MANAGEMENT |
| 1.144 APPL-26-005056 | CIS Apple macOS 26 Tahoe STIG v1.0.0 CAT II | Unix | CONFIGURATION MANAGEMENT |
| 1.146 WN11-CC-000195 | CIS Microsoft Windows 11 STIG v1.2.0 CAT II | Windows | CONFIGURATION MANAGEMENT |
| 1.159 APPL-15-005150 | CIS Apple macOS 15 Sequoia STIG v1.0.0 CAT II | Unix | CONFIGURATION MANAGEMENT |
| 1.160 APPL-15-005160 | CIS Apple macOS 15 Sequoia STIG v1.0.0 CAT II | Unix | CONFIGURATION MANAGEMENT |
| 2.1.1.1.2 Set the 'ip domain-name' | CIS Cisco IOS XE 17.x v2.2.1 L1 | Cisco | CONFIGURATION MANAGEMENT |
| 2.3.2.1 Ensure Set Time and Date Automatically Is Enabled | CIS Apple macOS 15.0 Sequoia v2.1.0 L1 | Unix | AUDIT AND ACCOUNTABILITY |
| 2.3.2.1 Ensure Set Time and Date Automatically Is Enabled | CIS Apple macOS 13.0 Ventura v4.0.0 L1 | Unix | AUDIT AND ACCOUNTABILITY |
| 2.8.1 Audit Universal Control Settings | CIS Apple macOS 14.0 Sonoma v3.1.0 L1 | Unix | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 2.8.1 Audit Universal Control Settings | CIS Apple macOS 26 Tahoe v1.1.0 L1 | Unix | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 2.8.1 Audit Universal Control Settings | CIS Apple macOS 13.0 Ventura v4.0.0 L1 | Unix | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 3.10.3 Ensure Mail Summarization Is Disabled | AirWatch - CIS Apple iPadOS 18 v2.0.0 L1 Institutionally Owned | MDM | ACCESS CONTROL, CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 3.10.3 Ensure Mail Summarization Is Disabled | AirWatch - CIS Apple iPadOS 26 v1.0.0 L1 Institutionally Owned | MDM | ACCESS CONTROL, CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 4.1.4 Ensure 'App Privacy Report' is enabled | AirWatch - CIS Apple iPadOS 17 Institutionally Owned L2 | MDM | CONFIGURATION MANAGEMENT |
| 4.4 Ensure 'Software Update' returns 'Your software is up to date.' | AirWatch - CIS Apple iPadOS 17 Institutionally Owned L1 | MDM | RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY |
| 4.6 Review 'Mail Privacy Protection' settings | AirWatch - CIS Apple iPadOS 17 Institutionally Owned L1 | MDM | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 5.4.2 Ensure system accounts are non-login | CIS SUSE Linux Enterprise Workstation 11 L1 v2.1.1 | Unix | ACCESS CONTROL, MEDIA PROTECTION |
| 6.4 Safari disable Internet Plugins for global use | CIS Apple macOS 10.12 L2 v1.2.0 | Unix | CONFIGURATION MANAGEMENT |
| AIOS-16-003400 - Apple iOS/iPadOS 16 must not allow backup to remote systems (My Photo Stream) - My Photo Stream. | MobileIron - DISA Apple iOS-iPadOS 16 STIG v2r2 | MDM | ACCESS CONTROL, CONFIGURATION MANAGEMENT |
| AIOS-16-006900 - Apple iOS/iPadOS 16 must be configured to not allow more than 10 consecutive failed authentication attempts. | MobileIron - DISA Apple iOS-iPadOS 16 STIG v2r2 | MDM | ACCESS CONTROL |
| AIOS-16-010200 - Apple iOS/iPadOS 16 must be configured to disable ad hoc wireless client-to-client connection capability. | MobileIron - DISA Apple iOS-iPadOS 16 STIG v2r2 | MDM | SYSTEM AND COMMUNICATIONS PROTECTION |
| AIOS-16-010600 - Apple iOS/iPadOS 16 must implement the management setting: Not allow automatic completion of Safari browser passcodes. | MobileIron - DISA Apple iOS-iPadOS 16 STIG v2r2 | MDM | CONFIGURATION MANAGEMENT |
| AIOS-16-706900 - Apple iOS/iPadOS 16 must be configured to not allow more than 10 consecutive failed authentication attempts. | MobileIron - DISA Apple iOS/iPadOS BYOAD 16 v1r2 | MDM | ACCESS CONTROL |
| AIOS-16-709900 - Apple iOS/iPadOS 16 must be configured to wipe enterprise data and apps upon unenrollment from MDM. | MobileIron - DISA Apple iOS/iPadOS BYOAD 16 v1r2 | MDM | CONFIGURATION MANAGEMENT, MEDIA PROTECTION |
| AIOS-17-706900 - Apple iOS/iPadOS 17 must be configured to not allow more than 10 consecutive failed authentication attempts. | MobileIron - DISA Apple iOS/iPadOS BYOAD 17 v1r2 | MDM | ACCESS CONTROL |
| AIOS-17-707400 - Apple iOS/iPadOS 17 allow list must be configured to not include applications with the following characteristics: | MobileIron - DISA Apple iOS/iPadOS BYOAD 17 v1r2 | MDM | CONFIGURATION MANAGEMENT |
| APPL-26-005170 - The macOS system must disable Apple Intelligence during Setup Assistant. | DISA Apple macOS 26 Tahoe STIG v1r3 | Unix | CONFIGURATION MANAGEMENT |
| GOOG-011-999999 - All Google Android 11 installations must be removed. | MobileIron - DISA Google Android 11 COPE v2r1 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-12-006800 - Google Android 12 must be configured to not display the following (work profile) notifications when the device is locked: | AirWatch - DISA Google Android 12 COBO v1r2 | MDM | ACCESS CONTROL |
| GOOG-12-006800 - Google Android 12 must be configured to not display the following (work profile) notifications when the device is locked: | AirWatch - DISA Google Android 12 COPE v1r2 | MDM | ACCESS CONTROL |
| GOOG-13-706800 - Google Android 13 must be configured to not display the following (work profile) notifications when the device is locked: [selection: | AirWatch - DISA Google Android 13 BYOAD v1r3 | MDM | ACCESS CONTROL |
| GOOG-14-706800 - Google Android 14 must be configured to not display the following (work profile) notifications when the device is locked: [selection: | AirWatch - DISA Google Android 14 BYOAD v1r2 | MDM | ACCESS CONTROL |