CIS Sybase 15.0 L2 DB v1.1.0

Name: CIS Sybase 15.0 L2 DB v1.1.0

Updated: 6/17/2024

Authority: CIS

Plugin: SybaseDB

Revision: 1.1

Estimated Item Count: 23

Filename: CIS_Sybase_15_0_v1_1_0_L2_Database.audit

Size: 45.5 kB

MD5: 06bedb109614905532c267aae76d6c38

SHA256: b740c22eeca1e2c99b8ddd2bdc4c4711d71f4419eee77152b6741bc730d05337

Description	Categories
1.6 Enforce password complexity - check password for digit	IDENTIFICATION AND AUTHENTICATION
1.6 Enforce password complexity - exec sp_passwordpolicy 'list'	IDENTIFICATION AND AUTHENTICATION
1.6 Enforce password complexity - minimum password length	IDENTIFICATION AND AUTHENTICATION
1.7 Set lockout thresholds
1.8 Set a system-wide password expiration	IDENTIFICATION AND AUTHENTICATION
1.9 Set passwords on important roles
1.10 Use login triggers to validate users IP addresses - exec sp_displaylogin <Login_Name>
1.10 Use login triggers to validate users IP addresses - exec sp_logintrigger
2.1 Enable Secure Socket Layer (SSL) Encryption - enable ssl
2.1 Enable Secure Socket Layer (SSL) Encryption - lsciphers
2.5.2 Consider disabling remote access
3.2.1 Review use of the guest user in databases
3.3.2 Limit access via procedures, views and triggers
3.6.2 Store encryption keys in a separate database
3.6.3 Password protect encryption keys	IDENTIFICATION AND AUTHENTICATION
4.1 Ensure sufficient space for logs
4.5 Periodically review audit settings
4.7 Review suspend audit configuration when device is full
4.9 Monitor Usage Statistics
5.3.1 Remove operating system related ESPs
5.3.2 Remove mail related ESPs
6.2 Ensure the server is physically secure
6.8 Run a host and/or network-based packet firewall