CSCv7|16.2

Title

Configure Centralized Point of Authentication

Description

Configure access for all accounts through as few centralized points of authentication as possible, including network, security, and cloud systems.

Reference Item Details

Category: Account Monitoring and Control

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1 Ensure that corporate login credentials are usedGCPCIS Google Cloud Platform v1.1.0 L1
1.1.1 (L1) Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1
1.1.1 (L1) Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1 Bitlocker
1.1.1 Configure AAA Authentication - TACACS - aaa authenticationCiscoCIS Cisco NX-OS L1 v1.0.0
1.1.1 Configure AAA Authentication - TACACS - aaa authenticationCiscoCIS Cisco NX-OS L2 v1.0.0
1.1.1 Configure AAA Authentication - TACACS - aaa groupCiscoCIS Cisco NX-OS L1 v1.0.0
1.1.1 Configure AAA Authentication - TACACS - aaa groupCiscoCIS Cisco NX-OS L2 v1.0.0
1.1.1 Configure AAA Authentication - TACACS - feature tacacs+CiscoCIS Cisco NX-OS L2 v1.0.0
1.1.1 Configure AAA Authentication - TACACS - feature tacacs+CiscoCIS Cisco NX-OS L1 v1.0.0
1.1.1 Configure AAA Authentication - TACACS - tacacs-serverCiscoCIS Cisco NX-OS L1 v1.0.0
1.1.1 Configure AAA Authentication - TACACS - tacacs-serverCiscoCIS Cisco NX-OS L2 v1.0.0
1.1.1 Enable 'aaa new-model'CiscoCIS Cisco IOS 17 L1 v1.0.0
1.1.1 Enable 'aaa new-model'CiscoCIS Cisco IOS 16 L1 v1.1.2
1.1.1 Enable 'aaa new-model'CiscoCIS Cisco IOS 15 L1 v4.1.1
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2016 DC L1 v1.3.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Windows Server 2012 R2 DC L1 v2.5.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Windows Server 2012 DC L1 v2.2.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Windows Server 2012 MS L1 v2.2.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2019 STIG DC STIG v1.0.1
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2016 STIG DC L1 v1.1.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2019 DC L1 v1.3.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2022 v1.0.0 L1 MS
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + NG
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2016 STIG DC STIG v1.1.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2019 STIG MS STIG v1.0.1
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2016 STIG MS STIG v1.1.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2016 MS L1 v1.3.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Windows Server 2012 R2 MS L1 v2.5.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L1 + BL + NG
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L1 + BL + NG
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L1 + BL
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2019 MS L1 v1.3.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2022 v1.0.0 L1 DC
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L1
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L1 + NG
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2019 STIG MS L1 v1.0.1
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2016 STIG MS L1 v1.1.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2019 STIG DC L1 v1.0.1
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more password(s)'WindowsCIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.3.0
1.1.1 Ensure 'Enforce password history' is set to '24 or more passwords'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + NG
1.1.1 Ensure 'Enforce password history' is set to '24 or more passwords'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1
1.1.1 Ensure 'Enforce password history' is set to '24 or more passwords'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL
1.1.1 Ensure 'Enforce password history' is set to '24 or more passwords'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL + NG
1.1.2 (L1) Ensure 'Maximum password age' is set to '60 or fewer days, but not 0'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1
1.1.2 (L1) Ensure 'Maximum password age' is set to '60 or fewer days, but not 0'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1 Bitlocker