| 2.1.1 Ensure a 'Consent Message' has been 'Configured' | MobileIron - CIS Apple iPadOS 18 v2.0.0 L1 End User Owned | MDM | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 2.2.1.11 Ensure 'Allow Handoff' is set to 'Disabled' | MobileIron - CIS Apple iPadOS 18 v2.0.0 L2 End User Owned | MDM | ACCESS CONTROL, MEDIA PROTECTION |
| 2.2.1.11 Ensure 'Allow Handoff' is set to 'Disabled' | MobileIron - CIS Apple iPadOS 26 v1.0.0 L2 End User Owned | MDM | ACCESS CONTROL, MEDIA PROTECTION |
| 2.4.5 Ensure 'Maximum grace period for device lock' is set to 'Immediately' | AirWatch - CIS Apple iPadOS 18 v2.0.0 L1 End User Owned | MDM | ACCESS CONTROL |
| 3.2.1.24 Ensure 'Allow Handoff' is set to 'Disabled' | AirWatch - CIS Apple iPadOS 18 v2.0.0 L1 Institutionally Owned | MDM | ACCESS CONTROL, MEDIA PROTECTION |
| 3.4.5 Ensure 'Maximum grace period for device lock' is set to 'Immediately' | AirWatch - CIS Apple iOS 26 v1.0.0 L1 Institution Owned | MDM | ACCESS CONTROL |
| 3.4.5 Ensure 'Maximum grace period for device lock' is set to 'Immediately' | AirWatch - CIS Apple iPadOS 18 v2.0.0 L1 Institutionally Owned | MDM | ACCESS CONTROL |
| 3.4.5 Ensure 'Maximum grace period for device lock' is set to 'Immediately' | AirWatch - CIS Apple iPadOS 26 v1.0.0 L1 Institutionally Owned | MDM | ACCESS CONTROL |
| 3.4.5 Ensure 'Maximum grace period for device lock' is set to 'Immediately' | MobileIron - CIS Apple iPadOS 17 Institutionally Owned L1 | MDM | ACCESS CONTROL |
| CD16-00-000400 - PostgreSQL must protect against a user falsely repudiating having performed organization-defined actions. | DISA Crunchy Data Postgres 16 STIG v1r3 PostgreSQLDB | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD16-00-000500 - PostgreSQL must provide audit record generation capability for DOD-defined auditable events within all DBMS/database components. | DISA Crunchy Data Postgres 16 STIG v1r3 PostgreSQLDB | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD16-00-001300 - PostgreSQL must produce audit records containing sufficient information to establish the sources (origins) of the events. | DISA Crunchy Data Postgres 16 STIG v1r3 PostgreSQLDB | PostgreSQLDB | AUDIT AND ACCOUNTABILITY |
| CD16-00-003200 - Unused database components, PostgreSQL software, and database objects must be removed. | DISA Crunchy Data Postgres 16 STIG v1r3 PostgreSQLDB | PostgreSQLDB | CONFIGURATION MANAGEMENT |
| CD16-00-003800 - If passwords are used for authentication, PostgreSQL must store only hashed, salted representations of passwords. | DISA Crunchy Data Postgres 16 STIG v1r3 PostgreSQLDB | PostgreSQLDB | IDENTIFICATION AND AUTHENTICATION |
| CD16-00-004100 - PostgreSQL must enforce authorized access to all PKI private keys stored/used by PostgreSQL. | DISA Crunchy Data Postgres 16 STIG v1r3 PostgreSQLDB | PostgreSQLDB | IDENTIFICATION AND AUTHENTICATION |
| CD16-00-004600 - PostgreSQL must separate user functionality (including user interface services) from database management functionality. | DISA Crunchy Data Postgres 16 STIG v1r3 PostgreSQLDB | PostgreSQLDB | SYSTEM AND COMMUNICATIONS PROTECTION |
| CD16-00-006400 - PostgreSQL must associate organization-defined types of security labels having organization-defined security label values with information in storage. | DISA Crunchy Data Postgres 16 STIG v1r3 PostgreSQLDB | PostgreSQLDB | ACCESS CONTROL |
| CD16-00-007900 - PostgreSQL must produce audit records of its enforcement of access restrictions associated with changes to the configuration of PostgreSQL or database(s). | DISA Crunchy Data Postgres 16 STIG v1r3 PostgreSQLDB | PostgreSQLDB | CONFIGURATION MANAGEMENT |
| CD16-00-008400 - PostgreSQL must only accept end entity certificates issued by DOD PKI or DOD-approved PKI Certification Authorities (CAs) for the establishment of all encrypted sessions. | DISA Crunchy Data Postgres 16 STIG v1r3 PostgreSQLDB | PostgreSQLDB | SYSTEM AND COMMUNICATIONS PROTECTION |
| GOOG-16-006000 - Google Android 16 must be configured to enforce a minimum password length of six characters. | AirWatch - DISA Google Android 16 COBO STIG v1r3 | MDM | IDENTIFICATION AND AUTHENTICATION |
| GOOG-16-006000 - Google Android 16 must be configured to enforce a minimum password length of six characters. | AirWatch - DISA Google Android 16 COPE STIG v1r3 | MDM | IDENTIFICATION AND AUTHENTICATION |
| GOOG-16-006100 - Google Android 16 must be configured to not allow passwords that include more than four repeating or sequential characters - Characters | AirWatch - DISA Google Android 16 COBO STIG v1r3 | MDM | IDENTIFICATION AND AUTHENTICATION |
| GOOG-16-006700 - Google Android 16 allowlist must be configured to not include applications with the following characteristics: | AirWatch - DISA Google Android 16 COBO STIG v1r3 | MDM | IDENTIFICATION AND AUTHENTICATION |
| GOOG-16-006750 - Google Android 16 allowlist must be configured to not include artificial intelligence (AI) applications that process device data in the cloud, including Google Gemini - AI applications that process device data in the cloud, including Google Gemini. | AirWatch - DISA Google Android 16 COPE STIG v1r3 | MDM | IDENTIFICATION AND AUTHENTICATION |
| GOOG-16-006800 - Google Android 16 must be configured to not display the following (work profile) notifications when the device is locked: [selection: | AirWatch - DISA Google Android 16 COPE STIG v1r3 | MDM | ACCESS CONTROL |
| GOOG-16-007200 - Google Android 16 must be configured to disable trust agents - NOTE: This requirement is not applicable (NA) for specific biometric authentication factors included in the product's Common Criteria evaluation. | MobileIron - DISA Google Android 16 COBO STIG v1r3 | MDM | IDENTIFICATION AND AUTHENTICATION |
| GOOG-16-007400 - Google Android 16 must be configured to disable developer modes. | AirWatch - DISA Google Android 16 COBO STIG v1r3 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-16-007700 - Google Android 16 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the device. | AirWatch - DISA Google Android 16 COBO STIG v1r3 | MDM | ACCESS CONTROL |
| GOOG-16-007800 - Google Android 16 must be configured to generate audit records for the following auditable events: Detected integrity violations. | MobileIron - DISA Google Android 16 COBO STIG v1r3 | MDM | AUDIT AND ACCOUNTABILITY |
| GOOG-16-008500 - Google Android 16 must be configured to not allow backup of [all applications, configuration data] to locally connected systems. | MobileIron - DISA Google Android 16 COBO STIG v1r3 | MDM | SYSTEM AND COMMUNICATIONS PROTECTION |
| GOOG-16-009000 - Google Android 16 must be configured to disable multiuser modes. | AirWatch - DISA Google Android 16 COPE STIG v1r3 | MDM | ACCESS CONTROL |
| GOOG-16-009800 - Google Android 16 users must complete required training. | AirWatch - DISA Google Android 16 COPE STIG v1r3 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-16-009950 - Google Android 16 must be configured to enforce a password for Wi-Fi and Bluetooth hotspot if approved for use by the authorizing official (AO). If not approved for use, Wi-Fi and Bluetooth hotspot must be disabled - AO. If not approved for use, Wi-Fi and Bluetooth hotspot must be disabled. | AirWatch - DISA Google Android 16 COPE STIG v1r3 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-16-010000 - Google Android 16 must have the DOD root and intermediate PKI certificates installed. | AirWatch - DISA Google Android 16 COBO STIG v1r3 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-16-010200 - The Google Android 16 work profile must be configured to enforce the system application disable list. | AirWatch - DISA Google Android 16 COPE STIG v1r3 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-16-010900 - Android 16 devices must be configured to disable the use of third-party keyboards. | MobileIron - DISA Google Android 16 COBO STIG v1r3 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-16-010900 - Android 16 devices must be configured to disable the use of third-party keyboards. | AirWatch - DISA Google Android 16 COPE STIG v1r3 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-16-010900 - Android 16 devices must be configured to disable the use of third-party keyboards. | MobileIron - DISA Google Android 16 COPE STIG v1r3 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-16-011000 - Android 16 devices must be configured to enable Common Criteria (CC) Mode - CC Mode. | AirWatch - DISA Google Android 16 COBO STIG v1r3 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-16-012300 - Google Android 16 must allow only the administrator (EMM) to install/remove DOD root and intermediate PKI certificates - EMM to install/remove DOD root and intermediate PKI certificates. | AirWatch - DISA Google Android 16 COPE STIG v1r3 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-16-012500 - Google Android 16 must be configured to disable 'Private Space' use - Private Space use. | MobileIron - DISA Google Android 16 COBO STIG v1r3 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-16-012500 - Google Android 16 must be configured to disable 'Private Space' use - Private Space use. | MobileIron - DISA Google Android 16 COPE STIG v1r3 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-16-013000 - Google Android 16 must disable the user's ability to wipe the device. | AirWatch - DISA Google Android 16 COBO STIG v1r3 | MDM | CONFIGURATION MANAGEMENT |
| GOOG-16-013500 - Google Android 16 must implement the management setting: disable Camera. | AirWatch - DISA Google Android 16 COBO STIG v1r3 | MDM | CONFIGURATION MANAGEMENT |
| SQLD-22-000100 - SQL Server must integrate with an organization-level authentication/access mechanism providing account management and automation for all users, groups, roles, and any other principals. | DISA Microsoft SQL Server 2022 Database STIG v1r3 | MS_SQLDB | ACCESS CONTROL |
| SQLD-22-000600 - SQL Server must protect against a user falsely repudiating by ensuring databases are not in a trust relationship. | DISA Microsoft SQL Server 2022 Database STIG v1r3 | MS_SQLDB | AUDIT AND ACCOUNTABILITY |
| SQLD-22-001800 - The certificate used for encryption must be backed up and stored in a secure location that is not on the SQL Server. | DISA Microsoft SQL Server 2022 Database STIG v1r3 | MS_SQLDB | SYSTEM AND COMMUNICATIONS PROTECTION |
| SQLD-22-002000 - Database contents must be protected from unauthorized and unintended information transfer by enforcement of a data transfer policy. | DISA Microsoft SQL Server 2022 Database STIG v1r3 | MS_SQLDB | SYSTEM AND COMMUNICATIONS PROTECTION |
| SQLD-22-002100 - SQL Server must check the validity of all data inputs except those specifically identified by the organization. | DISA Microsoft SQL Server 2022 Database STIG v1r3 | MS_SQLDB | SYSTEM AND INFORMATION INTEGRITY |
| SQLD-22-003200 - SQL Server must use NSA-approved cryptography to protect classified information in accordance with the data owner's requirements. | DISA Microsoft SQL Server 2022 Database STIG v1r3 | MS_SQLDB | SYSTEM AND COMMUNICATIONS PROTECTION |
