SQL4-00-014000 - SQL Server and/or the operating system must protect its audit configuration from unauthorized modification.

CAT|II

CCI|CCI-001494

Group-ID|V-67803

Rule-ID|SV-82293r1_rule

STIG-ID|SQL4-00-014000

Vuln-ID|V-67803

SQL4-00-014100 - SQL Server and the operating system must protect SQL Server audit features from unauthorized removal.

CCI|CCI-001495

Group-ID|V-67805

Rule-ID|SV-82295r1_rule

STIG-ID|SQL4-00-014100

Vuln-ID|V-67805

SQL4-00-015350 - Software, applications, and configuration files that are part of, or related to, the SQL Server  installation must be monitored to discover unauthorized changes.

800-53|AC-6(7)

800-53|CM-6

CCI|CCI-001499

CSCv6|3.1

Group-ID|V-67807

Rule-ID|SV-82297r1_rule

STIG-ID|SQL4-00-015350

Vuln-ID|V-67807

SQL4-00-015400 - SQL Server software installation account(s) must be restricted to authorized users.

Group-ID|V-67811

Rule-ID|SV-82301r1_rule

STIG-ID|SQL4-00-015400

Vuln-ID|V-67811

SQL4-00-015500 - Database software directories, including SQL Server configuration files, must be stored in dedicated directories, separate from the host OS and other applications.

CAT|III

Group-ID|V-67813

Rule-ID|SV-82303r2_rule

STIG-ID|SQL4-00-015500

Vuln-ID|V-67813

SQL4-00-016500 - SQL Server must have the SQL Server Data Tools (SSDT) software component removed if it is unused.

800-53|CM-7(4)

CCI|CCI-000381

Group-ID|V-67823

Rule-ID|SV-82313r1_rule

STIG-ID|SQL4-00-016500

Vuln-ID|V-67823

SQL4-00-016600 - SQL Server must have the SQL Server Reporting Services (SSRS) software component removed if it is unused.

Group-ID|V-67825

Rule-ID|SV-82315r1_rule

STIG-ID|SQL4-00-016600

Vuln-ID|V-67825

SQL4-00-016700 - SQL Server must have the SQL Server Integration Services (SSIS) software component removed if it is unused.

Group-ID|V-67827

Rule-ID|SV-82317r1_rule

STIG-ID|SQL4-00-016700

Vuln-ID|V-67827

SQL4-00-016800 - SQL Server must have the SQL Server Analysis Services (SSAS) software component removed if it is unused.

Group-ID|V-67829

Rule-ID|SV-82319r1_rule

STIG-ID|SQL4-00-016800

Vuln-ID|V-67829

SQL4-00-016805 - SQL Server must have the SQL Server Distributed Replay Client software component removed if it is unused.

Group-ID|V-67831

Rule-ID|SV-82321r1_rule

STIG-ID|SQL4-00-016805

Vuln-ID|V-67831

SQL4-00-016810 - SQL Server must have the SQL Server Distributed Replay Controller software component removed if it is unused.

Group-ID|V-67833

Rule-ID|SV-82323r1_rule

STIG-ID|SQL4-00-016810

Vuln-ID|V-67833

SQL4-00-016815 - SQL Server must have the Full-Text Search software component removed if it is unused.

Group-ID|V-67835

Rule-ID|SV-82325r1_rule

STIG-ID|SQL4-00-016815

Vuln-ID|V-67835

SQL4-00-016820 - SQL Server must have the Master Data Services software component removed if it is unused.

Group-ID|V-67837

Rule-ID|SV-82327r1_rule

STIG-ID|SQL4-00-016820

Vuln-ID|V-67837

SQL4-00-016826 - SQL Server must have the SQL Server Replication software component removed if it is unused.

Group-ID|V-67839

Rule-ID|SV-82329r1_rule

STIG-ID|SQL4-00-016826

Vuln-ID|V-67839

SQL4-00-016830 - SQL Server must have the Data Quality Client software component removed if it is unused.

Group-ID|V-67841

Rule-ID|SV-82331r1_rule

STIG-ID|SQL4-00-016830

Vuln-ID|V-67841

SQL4-00-016845 - SQL Server must have the Client Tools SDK software component removed if it is unused.

Group-ID|V-67845

Rule-ID|SV-82335r1_rule

STIG-ID|SQL4-00-016845

Vuln-ID|V-67845

SQL4-00-016850 - SQL Server must have the Management Tools software component removed if it is unused.

Group-ID|V-67847

Rule-ID|SV-82337r1_rule

STIG-ID|SQL4-00-016850

Vuln-ID|V-67847

SQL4-00-031100 - SQL Server must use NIST FIPS 140-2 validated cryptographic modules for cryptographic operations.

800-53|SC-13

CAT|I

CCI|CCI-000803

CCI|CCI-002450

Group-ID|V-67871

Rule-ID|SV-82361r1_rule

STIG-ID|SQL4-00-031100

Vuln-ID|V-67871

SQL4-00-033600 - SQL Server must produce time stamps that can be mapped to Coordinated Universal Time (UTC, formerly GMT).

CCI|CCI-001890

Group-ID|V-67897

Rule-ID|SV-82387r1_rule

STIG-ID|SQL4-00-033600

Vuln-ID|V-67897

SQL4-00-034200 - SQL Server must disable communication protocols not required for operation.

CCI|CCI-001762

Group-ID|V-67905

Rule-ID|SV-82395r1_rule

STIG-ID|SQL4-00-034200

Vuln-ID|V-67905

SQL4-00-034800 - SQL Server must implement and/or support cryptographic mechanisms preventing the unauthorized disclosure of organization-defined information at rest on organization-defined information system components.

CCI|CCI-002476

Group-ID|V-67907

Rule-ID|SV-82397r1_rule

STIG-ID|SQL4-00-034800

Vuln-ID|V-67907

SQL4-00-035400 - Security-relevant software updates to SQL Server must be installed within the time period directed by an authoritative source (e.g., IAVM, CTOs, DTMs, and STIGs).

CCI|CCI-002605

Group-ID|V-67913

Rule-ID|SV-82403r1_rule

STIG-ID|SQL4-00-035400

Vuln-ID|V-67913

SQL4-00-039100 - The SQL Server Browser service must be disabled if its use is not necessary..

800-53|CM-7

CCI|CCI-000366

CSCv6|9.1

Group-ID|V-70623

Rule-ID|SV-85245r1_rule

STIG-ID|SQL4-00-039100

Vuln-ID|V-70623

Detections

Analytics

DISA STIG SQL Server 2014 Instance OS Audit v1r10

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous


Revision 1.4 Feb 8, 2022 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.3 Jul 30, 2021 Miscellaneous Metadata updated. References updated.
Revision 1.2 Jun 17, 2021 Miscellaneous Metadata updated. References updated.
Revision 1.1 Sep 29, 2020 Miscellaneous References updated.