Item Search

NameAudit NamePluginCategory
2.1.6 Disaster Recovery (DR) PlanCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB

CONTINGENCY PLANNING

2.3.2 Secure screen saver corners - bottom left cornerCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix

ACCESS CONTROL

2.3.2 Secure screen saver corners - top left cornerCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix

ACCESS CONTROL

2.3.3.7 Ensure Remote Apple Events Is DisabledCIS Apple macOS 13.0 Ventura v3.0.0 L1Unix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

2.4.1 Ensure Remote Apple Events Is DisabledCIS Apple macOS 10.14 v2.0.0 L1Unix

CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION

2.6 Ensure 'password_lifetime' is Less Than or Equal to '365'CIS MariaDB 10.6 Database L1 v1.1.0MySQLDB

IDENTIFICATION AND AUTHENTICATION

2.6.6 Enable Location ServicesCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix

CONFIGURATION MANAGEMENT

2.7.1 iCloud configurationCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix
2.7.3 iCloud DriveCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix
2.8.1 Time Machine Auto-BackupCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix

CONTINGENCY PLANNING

2.12 Configure Secure Empty TrashCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix

CONFIGURATION MANAGEMENT

3.4 Enable remote logging for Desktops on trusted networksCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix

AUDIT AND ACCOUNTABILITY

4.1 Disable Bonjour advertising serviceCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix

SYSTEM AND COMMUNICATIONS PROTECTION

4.3 Create network specific locationsCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix
4.7 Ensure the 'secure_file_priv' is Configured CorrectlyCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB

ACCESS CONTROL, MEDIA PROTECTION

4.9 Ensure the latest iOS device architecture is used by high-value targetsMobileIron - CIS Apple iPadOS 17 Institutionally Owned L2MDM

CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT

4.9 Ensure the latest iOS device architecture is used by high-value targetsAirWatch - CIS Apple iOS 17 Institution Owned L2MDM

CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT

4.9 Ensure the latest iOS device architecture is used by high-value targetsMobileIron - CIS Apple iOS 17 Institution Owned L2MDM

CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT

4.9 Ensure the latest iOS device architecture is used by high-value targetsAirWatch - CIS Apple iOS 17 v1.1.0 End User Owned L2MDM

CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT

4.9 Ensure the latest iOS device architecture is used by high-value targetsMobileIron - CIS Apple iOS 17 v1.1.0 End User Owned L2MDM

CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT

4.9 Ensure the latest iOS device architecture is used by high-value targetsAirWatch - CIS Apple iPadOS 17 v1.1.0 End User Owned L2MDM

CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT

4.9 Ensure the latest iOS device architecture is used by high-value targetsAirWatch - CIS Apple iPadOS 17 Institutionally Owned L2MDM

CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT

4.9 Ensure the latest iOS device architecture is used by high-value targetsMobileIron - CIS Apple iPadOS 17 v1.1.0 End User Owned L2MDM

CONFIGURATION MANAGEMENT, PROGRAM MANAGEMENT

5.1.5 Check Library folder for world writable filesCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix

ACCESS CONTROL

5.2 Ensure 'FILE' is Not Granted to Non-Administrative UsersCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB

ACCESS CONTROL

5.4 Automatically lock the login keychain for inactivityCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix

IDENTIFICATION AND AUTHENTICATION

5.5 Ensure login keychain is locked when the computer sleepsCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix

IDENTIFICATION AND AUTHENTICATION

5.6 Enable OCSP and CRL certificate checking - CRLStyleCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix

IDENTIFICATION AND AUTHENTICATION

5.6 Enable OCSP and CRL certificate checking - OCSPStyleCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix

IDENTIFICATION AND AUTHENTICATION

5.13 Create a Login window bannerCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix

ACCESS CONTROL

5.15 Disable Fast User SwitchingCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix

ACCESS CONTROL

5.16 Secure individual keychain and itemsCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix
5.17 Create specialized keychains for different purposesCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix
5.18 Install an approved tokend for smartcard authenticationCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix
6.1 Ensure 'log_error' is configured correctlyCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB

AUDIT AND ACCOUNTABILITY

6.4 Safari disable Internet Plugins for global useCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix

CONFIGURATION MANAGEMENT

6.5 Ensure the Audit Plugin Can't be UnloadedCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB

AUDIT AND ACCOUNTABILITY

6.5 Use parental controls for systems that are not centrally managedCIS Apple OSX 10.10 Yosemite L2 v1.2.0Unix
7.1 Disable use of the mysql_old_password pluginCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB

IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

7.3 Ensure strong authentication is utilized for all accountsCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB

IDENTIFICATION AND AUTHENTICATION

8.2 Ensure 'ssl_type' is Set to 'ANY', 'X509', or 'SPECIFIED' for All Remote UsersCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

9.1 Ensure Replication Traffic is SecuredCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB

ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

9.3 Ensure 'super_priv' is Not Set to 'Y' for Replication UsersCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB

ACCESS CONTROL

23.2 (L1) Ensure 'Configure System Guard Launch' is set to 'Unmanaged Enables Secure Launch if supported by hardware'CIS Microsoft Intune for Windows 11 v3.0.1 L1Windows

SYSTEM AND INFORMATION INTEGRITY

Check replica status nullCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB
have_sslCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB
NIST_macOS_Monterey_800-53r5_high_v1.0.0.audit from NIST macOS Monterey v1.0.0NIST macOS Monterey v1.0.0 - 800-53r5 HighUnix
NIST_macOS_Monterey_cnssi-1253_v1.0.0.audit from NIST macOS Monterey v1.0.0NIST macOS Monterey v1.0.0 - CNSSI 1253Unix
secure_authCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB
show replica statusCIS MariaDB 10.6 Database L1 v1.1.0MySQLDB