CSCv7|18.3

Title

Verify That Acquired Software is Still Supported

Description

Verify that the version of all software acquired from outside your organization is still supported by the developer or appropriately hardened based on developer security recommendations.

Reference Item Details

Category: Application Software Security

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.3 Ensure Installation of Community PackagesUnixCIS PostgreSQL 9.6 OS v1.0.0
1.3 Ensure Installation of Community PackagesUnixCIS PostgreSQL 10 OS v1.0.0
1.3 Ensure Installation of Community PackagesUnixCIS PostgreSQL 9.5 OS v1.1.0
1.3 Ensure Installation of Community PackagesUnixCIS PostgreSQL 11 OS v1.0.0
4.4 Ensure images are scanned and rebuilt to include security patchesUnixCIS Docker v1.7.0 L1 Docker - Linux
4.11 Ensure only verified packages are installedUnixCIS Docker v1.7.0 L2 Docker - Linux
5.1.5.3 Ensure the admin consent workflow is enabledmicrosoft_azureCIS Microsoft 365 Foundations E3 L1 v3.1.0
7.28 (L2) Virtual machines should have virtual machine hardware version 19 or newerVMwareCIS VMware ESXi 8.0 v1.1.0 L2
18.8.7.3 (L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.1
18.8.7.3 (L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.1
18.9.7.2 (L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2022 v3.0.0 L1 Domain Controller
18.9.7.2 (L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 v3.0.0 L1 MS
18.9.7.2 (L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 v3.0.0 L1 DC
18.9.7.2 (L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 Stand-alone v2.0.0 L1 MS
18.9.7.2 (L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Windows Server 2012 R2 DC L1 v3.0.0
18.9.7.2 (L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Windows Server 2012 MS L1 v3.0.0
18.9.7.2 (L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2025 v1.0.0 L1 DC
18.9.7.2 (L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2022 v3.0.0 L1 Member Server
18.9.7.2 (L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Windows Server 2012 DC L1 v3.0.0
18.9.7.2 (L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Windows Server 2012 R2 MS L1 v3.0.0
18.9.7.2 (L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 v3.0.1 L1 MS
18.9.7.2 (L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 v3.0.1 L1 DC
18.9.7.2 (L1) Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2025 v1.0.0 L1 MS
18.9.7.2 Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG v3.0.0 L1 MS
18.9.7.2 Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2022 STIG v2.0.0 L1 Domain Controller
18.9.7.2 Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG v3.0.0 L1 DC
18.9.7.2 Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2016 STIG v3.0.0 L1 Domain Controller
18.9.7.2 Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2022 STIG v2.0.0 L1 Member Server
18.9.7.2 Ensure 'Prevent device metadata retrieval from the Internet' is set to 'Enabled'WindowsCIS Microsoft Windows Server 2019 STIG v3.0.0 L1 MS