| 1.2 Do Not Install a Multi-Use System - chkconfig | CIS BIND DNS v3.0.0 Authoritative Name Server | Unix | CONFIGURATION MANAGEMENT |
| 1.2.10 Set 'transport input none' for 'line aux 0' | CIS Cisco IOS 12 L1 v4.0.0 | Cisco | CONFIGURATION MANAGEMENT |
| 1.3.3 Disable printer daemons, if possible 'XPRINTSERVERS=' | CIS HP-UX 11i v1.5 | Unix | CONFIGURATION MANAGEMENT |
| 1.6.1.4 Ensure SETroubleshoot is not installed - dpkg | CIS Distribution Independent Linux Server L2 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 1.6.1.5 Ensure the MCS Translation Service (mcstrans) is not installed - dpkg | CIS Distribution Independent Linux Workstation L2 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.1.3 Show Bluetooth status in menu bar | CIS Apple macOS 10.13 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.3.1 Ensure NIS Client is not installed - dpkg | CIS Distribution Independent Linux Workstation L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.3.1 Ensure NIS Client is not installed - zypper | CIS Distribution Independent Linux Workstation L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.3.2 Ensure rsh client is not installed - dpkg | CIS Distribution Independent Linux Server L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.3.4 Ensure telnet client is not installed - dpkg | CIS Distribution Independent Linux Server L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.4.7 Disable Bluetooth Sharing | CIS Apple macOS 10.12 L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 3.3 Ensure Auto-Scaling Launch Configuration for Web-Tier is configured to use an approved Amazon Machine Image | CIS Amazon Web Services Three-tier Web Architecture L1 1.0.0 | amazon_aws | CONFIGURATION MANAGEMENT |
| 4.4 Scan and rebuild the images to include security patches | CIS Docker 1.13.0 v1.0.0 L1 Docker | Unix | CONFIGURATION MANAGEMENT |
| 5.1 Ensure 'Bluetooth Handsfree Service (BthHFSrv)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.2 Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.2 Ensure 'Bluetooth Support Service (bthserv)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.3 Ensure 'Computer Browser (Browser)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.7 Ensure 'Internet Connection Sharing (ICS) (SharedAccess) ' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.7 Ensure 'Internet Connection Sharing (ICS) (SharedAccess) ' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.7 Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.8 Ensure 'Link-Layer Topology Discovery Mapper (lltdsvc)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.10 Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled'' | CIS Windows 7 Workstation Level 2 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.11 Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.11 Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.12 Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.12 Ensure 'Peer Networking Grouping (p2psvc)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.12 Mount container's root filesystem as read only | CIS Docker 1.13.0 v1.0.0 L1 Docker | Unix | CONFIGURATION MANAGEMENT |
| 5.13 Ensure 'Peer Networking Identity Manager (p2pimsvc)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.14 Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.14 Ensure 'PNRP Machine Name Publication Service (PNRPAutoReg)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.15 Ensure 'Problem Reports and Solutions Control Panel Support (wercplsupport)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.16 Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.18 Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.18 Ensure 'Remote Desktop Services (TermService)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.20 Ensure 'Remote Procedure Call (RPC) Locator (RpcLocator)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.21 Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.26 Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.29 Ensure 'Web Management Service (WMSvc)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.33 Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.34 Ensure 'WinHTTP Web Proxy Auto-Discovery Service (WinHttpAutoProxySvc)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.35 Ensure 'World Wide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.36 Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.36 Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 7.14 Apple File System (APFS) | CIS Apple macOS 10.12 L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 8.4 Disable the HTTP Statistics Server | CIS BIND DNS v3.0.0 Caching Only Name Server | Unix | CONFIGURATION MANAGEMENT |
| 9.3 Disable deploy on startup of applications | CIS Apache Tomcat 8 L2 v1.0.1 | Unix | CONFIGURATION MANAGEMENT |
| 10.16 Do not resolve hosts on logging valves | CIS Apache Tomcat 8 L2 v1.0.1 | Unix | CONFIGURATION MANAGEMENT |
| 18.3.2 Ensure 'Configure SMB v1 client' is set to 'Enabled: Bowser, MRxSmb20, NSI' | CIS Windows Server 2012 DC L1 v2.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 18.3.3 Ensure 'Configure SMB v1 server' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 18.5.4.2 Ensure 'Turn off multicast name resolution' is set to 'Enabled' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
