| 1.1.1.6 Ensure mounting of squashfs filesystems is disabled - modprobe | CIS Debian 8 Server L1 v2.0.1 | Unix | CONFIGURATION MANAGEMENT |
| 1.1.22 Ensure nodev option set on removable media partitions | CIS Distribution Independent Linux Workstation L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 1.2 Do Not Install a Multi-Use System - systemctl | CIS BIND DNS v3.0.0 Authoritative Name Server | Unix | CONFIGURATION MANAGEMENT |
| 1.4.10.4 Disable Bluetooth 'com.apple.blued' | CIS Apple OSX 10.6 Snow Leopard L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 1.4.14.6 Disable Web Sharing | CIS Apple OSX 10.6 Snow Leopard L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 1.4.14.12 Disable Internet Sharing | CIS Apple OSX 10.6 Snow Leopard L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 1.6.1.5 Ensure the MCS Translation Service (mcstrans) is not installed - dpkg | CIS Distribution Independent Linux Server L2 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 1.6.1.5 Ensure the MCS Translation Service (mcstrans) is not installed - zypper | CIS Distribution Independent Linux Server L2 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.3.1 Ensure NIS Client is not installed - zypper | CIS Distribution Independent Linux Server L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.3.2 Ensure rsh client is not installed - zypper | CIS Distribution Independent Linux Workstation L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.3.3 Ensure talk client is not installed - dpkg | CIS Distribution Independent Linux Server L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.3.3 Ensure talk client is not installed - dpkg | CIS Distribution Independent Linux Workstation L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.3.3 Ensure talk client is not installed - zypper | CIS Distribution Independent Linux Server L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.3.4 Ensure telnet client is not installed - zypper | CIS Distribution Independent Linux Workstation L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.3.5 Ensure LDAP client is not installed - dpkg | CIS Distribution Independent Linux Workstation L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.3.5 Ensure LDAP client is not installed - zypper | CIS Distribution Independent Linux Workstation L1 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.4.7 Disable Bluetooth Sharing | CIS Apple macOS 10.13 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.6.1.2 Ensure all user storage APFS volumes are encrypted | CIS Apple macOS 10.13 L1 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.7.4 iCloud Drive Document sync | CIS Apple macOS 10.12 L2 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 2.7.5 iCloud Drive Desktop sync | CIS Apple macOS 10.12 L2 v1.1.0 | Unix | CONFIGURATION MANAGEMENT |
| 4.3 Do not install unnecessary packages in the container | CIS Docker 1.12.0 v1.0.0 L1 Docker | Unix | CONFIGURATION MANAGEMENT |
| 4.4 Rebuild the images to include security patches | CIS Docker 1.6 v1.0.0 L1 Docker | Unix | CONFIGURATION MANAGEMENT |
| 5.1 Ensure 'Bluetooth Handsfree Service (BthHFSrv)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.3 Ensure 'HomeGroup Listener (HomeGroupListener)' is set to 'Disabled' | CIS Windows 7 Workstation Level 1 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.5 Ensure 'HomeGroup Provider (HomeGroupProvider)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.6 Ensure 'Internet Connection Sharing (ICS) (SharedAccess) ' is set to 'Disabled' | CIS Windows 7 Workstation Level 1 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.8 Ensure 'Media Center Extender Service (Mcx2Svc)' is set to 'Disabled' or 'Not Installed' | CIS Windows 7 Workstation Level 1 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.10 Ensure 'Microsoft iSCSI Initiator Service (MSiSCSI)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.11 Ensure 'Peer Name Resolution Protocol (PNRPsvc)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.16 Ensure 'Remote Access Auto Connection Manager (RasAuto)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.17 Ensure 'Remote Desktop Configuration (SessionEnv)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.19 Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.19 Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.19 Ensure 'Remote Desktop Services UserMode Port Redirector (UmRdpService)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.21 Ensure 'Remote Registry (RemoteRegistry)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.22 Ensure 'Routing and Remote Access (RemoteAccess)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.23 Ensure 'Server (LanmanServer)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.25 Ensure 'SNMP Service (SNMP)' is set to 'Disabled' or 'Not Installed' | CIS Windows 7 Workstation Level 2 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.26 Ensure 'SSDP Discovery (SSDPSRV)' is set to 'Disabled' | CIS Windows 7 Workstation Level 1 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.28 Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled' | CIS Windows 7 Workstation Level 1 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.28 Ensure 'UPnP Device Host (upnphost)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.30 Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.31 Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 + Bitlocker v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.31 Ensure 'Windows Error Reporting Service (WerSvc)' is set to 'Disabled' | CIS Windows 7 Workstation Level 2 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.32 Ensure 'Windows Media Player Network Sharing Service (WMPNetworkSvc)' is set to 'Disabled' or 'Not Installed' | CIS Microsoft Windows 8.1 L1 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.33 Ensure 'Windows Remote Management (WS-Management) (WinRM)' is set to 'Disabled' | CIS Microsoft Windows 8.1 L2 Bitlocker v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 5.34 Ensure 'Windows Media Center Receiver Service (ehRecvr)' is set to 'Disabled' or 'Not Installed' | CIS Windows 7 Workstation Level 1 v3.1.0 | Windows | CONFIGURATION MANAGEMENT |
| 6.4 Safari disable Internet Plugins for global use | CIS Apple macOS 10.13 L2 v1.0.0 | Unix | CONFIGURATION MANAGEMENT |
| 18.3.2 Ensure 'Configure SMB v1 client driver' is set to 'Enabled: Disable driver' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
| 18.3.3 Ensure 'Configure SMB v1 server' is set to 'Disabled' | CIS Microsoft Windows 8.1 L1 v2.3.0 | Windows | CONFIGURATION MANAGEMENT |
