| 1.1.1.9 Ensure usb-storage kernel module is not available | CIS Linux Mint 22 v1.0.0 L2 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.9 Ensure usb-storage kernel module is not available | CIS Ubuntu Linux 22.04 LTS v3.0.0 L2 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.9 Ensure usb-storage kernel module is not available | CIS Ubuntu Linux 22.04 LTS v3.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Debian Linux 12 v2.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Debian Linux 13 v1.1.0 L2 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Rocky Linux 8 v3.0.0 L2 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Oracle Linux 8 v4.0.0 L2 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Red Hat Enterprise Linux 10 v1.0.1 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Oracle Linux 10 v1.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Rocky Linux 10 v1.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS AlmaLinux OS 10 v1.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS AlmaLinux OS 10 v1.0.0 L2 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Red Hat Enterprise Linux 9 v3.0.0 L2 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Rocky Linux 9 v3.0.0 L2 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Rocky Linux 10 v1.0.0 L2 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Rocky Linux 9 v3.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Oracle Linux 10 v1.0.0 L2 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Oracle Linux 8 v4.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Red Hat Enterprise Linux 8 v4.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Red Hat Enterprise Linux 8 v4.0.0 L2 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Red Hat Enterprise Linux 9 v3.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS AlmaLinux OS 8 v4.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Ubuntu Linux 24.04 LTS v2.0.0 L2 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Rocky Linux 8 v3.0.0 L1 Server | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.1.1.10 Ensure usb-storage kernel module is not available | CIS Red Hat Enterprise Linux 10 v1.0.1 L2 Workstation | Unix | IDENTIFICATION AND AUTHENTICATION |
| 1.188 AZLX-23-002605 | CIS Amazon Linux 2023 STIG v1.0.0 CAT II | Unix | SYSTEM AND COMMUNICATIONS PROTECTION |
| 2.1.1.6 Audit Find My Mac | CIS Apple macOS 13.0 Ventura v4.0.0 L2 | Unix | ACCESS CONTROL, CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 3.1 Ensure detailed logging is enabled | CIS NGINX v3.0.0 L1 Webserver | Unix | AUDIT AND ACCOUNTABILITY |
| 4.7 Ensure the 'secure_file_priv' is Configured Correctly | CIS MariaDB 10.6 Database L1 v1.1.0 | MySQLDB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.8 Ensure the 'secure_file_priv' is Configured Correctly | CIS MySQL 5.6 Enterprise Database L1 v2.0.0 | MySQLDB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.9 Ensure the latest iOS device architecture is used by high-value targets | AirWatch - CIS Apple iPadOS 26 v1.0.0 L2 Institutionally Owned | MDM | CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT |
| 4.9 Ensure the latest iOS device architecture is used by high-value targets | AirWatch - CIS Apple iOS 18 v2.0.0 L2 Institution Owned | MDM | CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT |
| 4.9 Ensure the latest iOS device architecture is used by high-value targets | AirWatch - CIS Apple iOS 26 v1.0.0 L2 Institution Owned | MDM | CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT |
| 4.9 Ensure the latest iOS device architecture is used by high-value targets | MobileIron - CIS Apple iOS 26 v1.0.0 L2 Institution Owned | MDM | CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT |
| 4.9 Ensure the latest iOS device architecture is used by high-value targets | MobileIron - CIS Apple 18 v2.0.0 L2 Institutionally Owned | MDM | CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT |
| 4.9 Ensure the latest iOS device architecture is used by high-value targets | MobileIron - CIS Apple 26 v1.0.0 L2 Institutionally Owned | MDM | CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT |
| 4.9 Ensure the latest iOS device architecture is used by high-value targets | AirWatch - CIS Apple iPadOS 17 Institutionally Owned L2 | MDM | CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT |
| 18.9.11.2.16 Ensure 'Require additional authentication at startup: Configure TPM startup key and PIN:' is set to 'Enabled: Do not allow startup key and PIN with TPM' | CIS Windows 7 Workstation Bitlocker v3.2.0 | Windows | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 18.9.11.2.16 Ensure 'Require additional authentication at startup: Configure TPM startup key and PIN:' is set to 'Enabled: Do not allow startup key and PIN with TPM' | CIS Windows 7 Workstation Level 2 + Bitlocker v3.2.0 | Windows | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| AADC-CL-000290 - Adobe Acrobat Pro DC Classic must be configured to block Flash Content. | DISA STIG Adobe Acrobat Pro DC Classic Track v2r1 | Windows | CONFIGURATION MANAGEMENT |
| AADC-CL-001010 - Adobe Acrobat Pro DC Classic Protected Mode must be enabled. | DISA STIG Adobe Acrobat Pro DC Classic Track v2r1 | Windows | SYSTEM AND COMMUNICATIONS PROTECTION |
| AADC-CL-001305 - Adobe Acrobat Pro DC Classic Webmail must be disabled. | DISA STIG Adobe Acrobat Pro DC Classic Track v2r1 | Windows | CONFIGURATION MANAGEMENT |
| CASA-ND-001180 - The Cisco ASA must be configured to protect against known types of denial-of-service (DoS) attacks by enabling the Threat Detection feature - DoS attacks by enabling the Threat Detection feature. | DISA STIG Cisco ASA NDM v2r5 | Cisco | SYSTEM AND COMMUNICATIONS PROTECTION |
| CISC-ND-001030 - The Cisco switch must be configured to synchronize its clock with the primary and secondary time sources using redundant authoritative time sources. | DISA Cisco IOS XE Switch NDM STIG v3r6 | Cisco | AUDIT AND ACCOUNTABILITY |
| EPAS-00-002300 - The EDB Postgres Advanced Server must, by default, shut down upon audit failure, to include the unavailability of space for more audit log records; or must be configurable to shut down upon audit failure. | EnterpriseDB PostgreSQL Advanced Server OS Linux v2r1 | Unix | AUDIT AND ACCOUNTABILITY |
| F5BI-DM-000201 - The BIG-IP appliance must be configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources. | DISA F5 BIG-IP Device Management STIG v2r4 | F5 | AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT |
| FGFW-ND-000120 - The FortiGate device must synchronize internal information system clocks using redundant authoritative time sources | DISA Fortigate Firewall NDM STIG v1r4 | FortiGate | AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT |
| OS10-NDM-000680 - The Dell OS10 Switch must be configured to synchronize internal information system clocks using redundant authoritative time sources. | DISA Dell OS10 Switch NDM STIG v1r1 | Dell_OS10 | AUDIT AND ACCOUNTABILITY |
| SQLI-22-018100 - When using command-line tools such as SQLCMD in a mixed-mode authentication environment, users must use a logon method that does not expose the password. | DISA Microsoft SQL Server 2022 Instance STIG v1r4 MS_SQLDB | MS_SQLDB | IDENTIFICATION AND AUTHENTICATION |
| WN12-CC-000150 - WDigest Authentication must be disabled. | DISA Windows Server 2012 and 2012 R2 MS STIG v3r7 | Windows | CONFIGURATION MANAGEMENT |
