CSCv6|14.5

Title

Sensitive information stored on systems shall be encrypted at rest and require a secondary authentication mechanism, not integrated into the operating system, in order to access the information.

Description

Sensitive information stored on systems shall be encrypted at rest and require a secondary authentication mechanism, not integrated into the operating system, in order to access the information.

Reference Item Details

Category: Controlled Access Based on the Need to Know

Family: Application

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.33 Ensure that the --experimental-encryption-provider-config argument is set as appropriateUnixCIS Kubernetes 1.8 Benchmark v1.2.0 L1
1.1.34 Ensure that the --encryption-provider-config argument is set as appropriateUnixCIS Kubernetes 1.13 Benchmark v1.4.1 L1
1.1.34 Ensure that the --experimental-encryption-provider-config argument is set as appropriateUnixCIS Kubernetes 1.11 Benchmark v1.3.0 L1
1.1.34 Ensure that the --experimental-encryption-provider-config argument is set as appropriateUnixCIS Kubernetes 1.7.0 Benchmark v1.1.0 L1
1.1.34 Ensure that the encryption provider is set to aescbcUnixCIS Kubernetes 1.8 Benchmark v1.2.0 L1
1.1.35 Ensure that the encryption provider is set to aescbcUnixCIS Kubernetes 1.13 Benchmark v1.4.1 L1
1.1.35 Ensure that the encryption provider is set to aescbcUnixCIS Kubernetes 1.11 Benchmark v1.3.0 L1
1.1.35 Ensure that the encryption provider is set to aescbcUnixCIS Kubernetes 1.7.0 Benchmark v1.1.0 L1
4.2 Ensure Federal Information Processing Standard (FIPS) is enabledWindowsCIS MongoDB 3.2 L1 Windows Audit v1.0.0
4.2 Ensure Federal Information Processing Standard (FIPS) is enabledUnixCIS MongoDB 3.2 L1 Unix Audit v1.0.0
4.2 Ensure Federal Information Processing Standard (FIPS) is enabledWindowsCIS MongoDB 3.4 L1 Windows Audit v1.0.0
4.2 Ensure Federal Information Processing Standard (FIPS) is enabledUnixCIS MongoDB 3.4 L1 Unix Audit v1.0.0
6.9 Ensure the pgcrypto extension is installed and configured correctlyPostgreSQLDBCIS PostgreSQL 10 DB v1.0.0
6.9 Ensure the pgcrypto extension is installed and configured correctlyPostgreSQLDBCIS PostgreSQL 9.6 DB v1.0.0
6.9 Ensure the pgcrypto extension is installed and configured correctlyPostgreSQLDBCIS PostgreSQL 9.5 DB v1.1.0
6.9 Ensure the pgcrypto extension is installed and configured correctlyPostgreSQLDBCIS PostgreSQL 11 DB v1.0.0