Item Search

NameAudit NamePluginCategory
1.1.2.5.2 Ensure nosuid option set on /var/log partitionCIS FreeBSD 14 v1.0.1 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

1.1.2.6.2 Ensure nosuid option set on /var/audit partitionCIS FreeBSD 14 v1.0.1 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

2.2.1.8 Ensure 'Allow documents from managed sources in unmanaged destinations' is set to 'Disabled'AirWatch - CIS Apple iPadOS 17 v1.1.0 End User Owned L1MDM

ACCESS CONTROL, MEDIA PROTECTION

2.2.1.11 Ensure 'Allow Handoff' is set to 'Disabled'MobileIron - CIS Apple iPadOS 17 v1.1.0 End User Owned L2MDM

ACCESS CONTROL, MEDIA PROTECTION

2.2.1.13 Ensure 'Force Apple Watch wrist detection' is set to 'Enabled'MobileIron - CIS Apple iPadOS 17 v1.1.0 End User Owned L1MDM

ACCESS CONTROL, MEDIA PROTECTION

2.3.6 Ensure 'OS_ROLES' Is Set To 'FALSE'CIS Oracle Database 26ai v1.0.0 L1 RDBMSOracleDB

ACCESS CONTROL, MEDIA PROTECTION

2.3.11 Ensure 'SEC_RETURN_SERVER_RELEASE_BANNER' Is Set To 'FALSE'CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Linux Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

2.3.11 Ensure 'SEC_RETURN_SERVER_RELEASE_BANNER' Is Set To 'FALSE'CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Windows Server Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

2.3.14 Ensure 'RESOURCE_LIMIT' Is Set To 'TRUE'CIS Oracle Database 26ai v1.0.0 L1 RDBMSOracleDB

ACCESS CONTROL, MEDIA PROTECTION

3.2 Ensure CONNECT permissions on the 'guest' user is Revoked within all SQL Server databasesCIS Microsoft SQL Server 2022 v1.3.0 L1 AWS RDS MS_SQLDBMS_SQLDB

ACCESS CONTROL, MEDIA PROTECTION

3.3.1 Ensure 'Managed Safari Web Domains' is 'Configured'AirWatch - CIS Apple iPadOS 17 Institutionally Owned L1MDM

ACCESS CONTROL, MEDIA PROTECTION

3.3.1 Ensure 'Managed Safari Web Domains' is 'Configured'MobileIron - CIS Apple iPadOS 17 Institutionally Owned L1MDM

ACCESS CONTROL, MEDIA PROTECTION

3.12 Ensure Group Write Access for the Document Root Directories and Files Is Properly RestrictedCIS Apache HTTP Server 2.4 v2.3.0 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

4.1.1.8 Ensure access on /etc/ssh/ssh_config is configuredCIS IBM AIX 7 v1.2.0 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

4.2.5 Ensure that host based authentication files are not presentCIS IBM AIX 7 v1.2.0 L2Unix

ACCESS CONTROL, MEDIA PROTECTION

4.4.1.5 Ensure NFS exports use allow listsCIS IBM AIX 7 v1.2.0 L2Unix

ACCESS CONTROL, MEDIA PROTECTION

4.4.1.6 Ensure access by root over nfs is disabled or blockedCIS IBM AIX 7 v1.2.0 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

4.6.1.11 Ensure access to Xresources is configuredCIS IBM AIX 7 v1.2.0 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

4.6.3.4 Ensure sshd access is configuredCIS IBM AIX 7 v1.2.0 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

4.6.4.5 Ensure access to /var/spool/mqueue is configuredCIS IBM AIX 7 v1.2.0 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

4.7 Ensure No Public Database Links ExistCIS Oracle Database 26ai v1.0.0 L1 RDBMS On Linux Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

4.7 Ensure No Public Database Links ExistCIS Oracle Database 26ai v1.0.0 L1 RDBMS On Windows Server Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

4.9 Ensure That Compute Instances Do Not Have Public IP AddressesCIS Google Cloud Platform Foundation v5.0.0 L2GCP

ACCESS CONTROL, MEDIA PROTECTION

6.1.6 Ensure 'TEXT DATASTORE ACCESS' Is Revoked From Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Linux Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.1.9 Ensure 'ALTER SYSTEM' Is Revoked From Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMSOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.2.1 Ensure at is restricted to authorized usersCIS IBM AIX 7 v1.2.0 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

6.2.2 Ensure access to crontab is configuredCIS IBM AIX 7 v1.2.0 L1Unix

ACCESS CONTROL, MEDIA PROTECTION

6.2.3 Ensure 'IMP_FULL_DATABASE' Is Revoked From Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMSOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.2.4 Ensure 'DATAPUMP_EXP_FULL_DATABASE' Is Revoked From Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMSOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.2.5 Ensure 'DATAPUMP_IMP_FULL_DATABASE' is Revoked From Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMSOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.2.7 Ensure 'DV_AUDIT_CLEANUP' Is Revoked From Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Linux Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.2.7 Ensure 'DV_AUDIT_CLEANUP' Is Revoked From Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Windows Server Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.2.8 Ensure 'OLAP_DBA' Is Revoked From Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Linux Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.2.11 Ensure 'JAVASYSPRIVS' Is Revoked From Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Windows Server Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.2.13 Ensure 'SQL_FIREWALL_ADMIN' Is Revoked From Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Linux Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.2.15 Ensure 'JAVADEBUGPRIV' Is Revoked From Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Windows Server Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.2.17 Ensure 'DV_POLICY_OWNER' Is Revoked From Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Windows Server Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.2.19 Ensure 'AUDIT_VIEWER' Is Revoked From Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMSOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.2.22 Ensure 'EXECUTE_CATALOG_ROLE' Is Revoked from Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMSOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.3.2 Ensure 'cross db ownership chaining' Database Flag for Cloud SQL SQL Server Instance Is Set to 'off'CIS Google Cloud Platform Foundation v5.0.0 L1GCP

ACCESS CONTROL, MEDIA PROTECTION

6.4.1 Ensure 'ALL' Is Revoked On 'Sensitive' TablesCIS Oracle Database 26ai v1.0.0 L1 RDBMSOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.4.1 Ensure 'ALL' Is Revoked On 'Sensitive' TablesCIS Oracle Database 26ai v1.0.0 L1 RDBMS On Linux Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.5 Ensure That Cloud SQL Database Instances Do Not Implicitly Whitelist All Public IP AddressesCIS Google Cloud Platform Foundation v5.0.0 L1GCP

ACCESS CONTROL, MEDIA PROTECTION

6.5.1 Ensure 'DBA_COL_PRIVS' Is Revoked from Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Linux Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.5.1 Ensure 'DBA_COL_PRIVS' Is Revoked from Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Windows Server Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.7.1 Ensure Custom Java Privileges Are Revoked from Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMSOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.8.1 Ensure Directory Object Access Is Revoked From Unauthorized 'GRANTEE'CIS Oracle Database 26ai v1.0.0 L1 RDBMS On Windows Server Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.8.2 Review Directory Objects PrivilegesCIS Oracle Database 26ai v1.0.0 L1 RDBMS On Linux Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.8.3 Review External Tables With PreprocessorCIS Oracle Database 26ai v1.0.0 L1 RDBMS On Linux Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION

6.8.4 Review External TablesCIS Oracle Database 26ai v1.0.0 L1 RDBMS On Linux Host OS OracleDBOracleDB

ACCESS CONTROL, MEDIA PROTECTION