| 1.1 Host hardware must have auditable, authentic, and up to date system & device firmware | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | SYSTEM AND SERVICES ACQUISITION |
| 1.6 Host integrated hardware management controller must enable time synchronization | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | CONFIGURATION MANAGEMENT, MAINTENANCE |
| 1.7 Host integrated hardware management controller must enable remote logging of events | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 1.9 Ensure Web Tier ELB have SSL/TLS Certificate attached | CIS Amazon Web Services Three-tier Web Architecture L1 1.0.0 | amazon_aws | SYSTEM AND COMMUNICATIONS PROTECTION |
| 1.29 WN19-00-000290 | CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT II | Windows | CONFIGURATION MANAGEMENT |
| 1.67 WN19-AU-000110 | CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT II | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 1.67 WN19-AU-000110 | CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT II | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 1.68 WN19-AU-000120 | CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT II | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 1.68 WN19-AU-000120 | CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT II | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 1.85 WN19-AU-000300 | CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT II | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 1.86 WN19-AU-000310 | CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT II | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 1.169 WN19-DC-000230 | CIS Microsoft Windows Server 2019 STIG v4.0.0 DC CAT II | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 1.199 WN19-MS-000090 | CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT II | Windows | ACCESS CONTROL |
| 1.200 WN19-MS-000100 | CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT II | Windows | ACCESS CONTROL |
| 1.242 WN19-SO-000350 | CIS Microsoft Windows Server 2019 STIG v4.0.0 MS CAT II | Windows | IDENTIFICATION AND AUTHENTICATION |
| 2.2.30 (L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' and (when the Web Server (IIS) Role with Web Services Role Service is installed) 'IIS_IUSRS' (MS only) | CIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 MS | Windows | ACCESS CONTROL |
| 2.2.31 (L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' and (when the Web Server (IIS) Role with Web Services Role Service is installed) 'IIS_IUSRS' (MS only) | CIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.1 | Windows | ACCESS CONTROL |
| 2.2.32 (L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' and (when the Web Server (IIS) Role with Web Services Role Service is installed) 'IIS_IUSRS' (MS only) | CIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.1 | Windows | ACCESS CONTROL |
| 2.2.33 (L1) Ensure 'Impersonate a client after authentication' is set to 'Administrators, LOCAL SERVICE, NETWORK SERVICE, SERVICE' and (when the Web Server (IIS) Role with Web Services Role Service is installed) 'IIS_IUSRS' (MS only) | CIS Microsoft Windows Server 2016 v4.0.0 L1 MS | Windows | ACCESS CONTROL, AUDIT AND ACCOUNTABILITY |
| 2.3 Host must enable Secure Boot enforcement | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 3.3 Host must deactivate the ESXi Managed Object Browser (MOB) | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | ACCESS CONTROL, MEDIA PROTECTION |
| 3.4 Host must deactivate SLP | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 3.12 Host must lock an account after a specified number of failed login attempts | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | ACCESS CONTROL |
| 3.14 Host must configure the password history setting to restrict the reuse of passwords | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | IDENTIFICATION AND AUTHENTICATION |
| 3.16 Host must configure a session timeout for the API | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| 3.17 Host must automatically terminate idle host client sessions | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| 3.26 Host must enable the highest version of TLS supported | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 4.3 Host must log sufficient information for events | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 4.10 Host must verify certificates for TLS remote logging endpoints | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY |
| 5.6 Host should reject forged transmits on standard virtual switches and port groups | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 5.11 Host must isolate management communications | CIS VMware ESXi 8.0 v1.4.0 L1 Unix | Unix | ACCESS CONTROL, SYSTEM AND INFORMATION INTEGRITY |
| 6.1.1 Ensure 'AuditDisabled' organizationally is set to 'False' | CIS Microsoft 365 Foundations v7.0.0 L1 E5 | microsoft_azure | AUDIT AND ACCOUNTABILITY |
| 7.2 Virtual machines must require encryption for vMotion | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.5 Virtual machines must be configured to lock when the last console connection is closed | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.20 Virtual machines must limit access through the "dvfilter" network API | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 7.21 Virtual machines must deactivate virtual disk shrinking operations | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 7.25 Virtual machines must enable diagnostic logging | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | AUDIT AND ACCOUNTABILITY |
| 8.10 VMware Tools must deactivate Guest Store Upgrade operations unless required | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| 8.12 VMware Tools must limit the use of MSI transforms when reconfiguring VMware Tools | CIS VMware ESXi 8.0 v1.4.0 L1 VMware | VMware | CONFIGURATION MANAGEMENT |
| EPAS-00-008800 - The EDB Postgres Advanced Server must require users to reauthenticate when organization-defined circumstances or situations require reauthentication. | EnterpriseDB PostgreSQL Advanced Server DB v2r1 | PostgreSQLDB | SYSTEM AND COMMUNICATIONS PROTECTION |
| SQLD-22-000300 - SQL Server must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies. | DISA Microsoft SQL Server 2022 Database STIG v1r3 | MS_SQLDB | ACCESS CONTROL |
| SQLD-22-000600 - SQL Server must protect against a user falsely repudiating by ensuring databases are not in a trust relationship. | DISA Microsoft SQL Server 2022 Database STIG v1r3 | MS_SQLDB | AUDIT AND ACCOUNTABILITY |
| SQLD-22-001700 - The Database Master Key must be encrypted by the Service Master Key, where a Database Master Key is required and another encryption method has not been specified. | DISA Microsoft SQL Server 2022 Database STIG v1r3 | MS_SQLDB | SYSTEM AND COMMUNICATIONS PROTECTION |
| SQLD-22-001800 - The certificate used for encryption must be backed up and stored in a secure location that is not on the SQL Server. | DISA Microsoft SQL Server 2022 Database STIG v1r3 | MS_SQLDB | SYSTEM AND COMMUNICATIONS PROTECTION |
| SQLD-22-002000 - Database contents must be protected from unauthorized and unintended information transfer by enforcement of a data transfer policy. | DISA Microsoft SQL Server 2022 Database STIG v1r3 | MS_SQLDB | SYSTEM AND COMMUNICATIONS PROTECTION |
| SQLD-22-002100 - SQL Server must check the validity of all data inputs except those specifically identified by the organization. | DISA Microsoft SQL Server 2022 Database STIG v1r3 | MS_SQLDB | SYSTEM AND INFORMATION INTEGRITY |
| SQLD-22-002800 - SQL Server must enforce discretionary access control (DAC) policies, as defined by the data owner, over defined subjects and objects. | DISA Microsoft SQL Server 2022 Database STIG v1r3 | MS_SQLDB | ACCESS CONTROL |
| SQLD-22-002900 - Execution of stored procedures and functions that use execute as must be restricted to necessary cases only. | DISA Microsoft SQL Server 2022 Database STIG v1r3 | MS_SQLDB | ACCESS CONTROL |
| SQLD-22-003200 - SQL Server must use NSA-approved cryptography to protect classified information in accordance with the data owner's requirements. | DISA Microsoft SQL Server 2022 Database STIG v1r3 | MS_SQLDB | SYSTEM AND COMMUNICATIONS PROTECTION |
| SQLI-22-016400 - Execution of startup stored procedures must be restricted to necessary cases only. | DISA Microsoft SQL Server 2022 Instance STIG v1r4 MS_SQLDB | MS_SQLDB | ACCESS CONTROL |
