Item Search

NameAudit NamePluginCategory
1.1 Ensure Latest SQL Server Cumulative and Security Updates are InstalledCIS SQL Server 2017 Database L1 AWS RDS v1.2.0MS_SQLDB
1.1 Ensure Latest SQL Server Cumulative and Security Updates are InstalledCIS SQL Server 2019 Database L1 AWS RDS v1.2.0MS_SQLDB
1.1 Ensure Latest SQL Server Cumulative and Security Updates are InstalledCIS SQL Server 2019 Database L1 DB v1.2.0MS_SQLDB
1.1 Ensure Latest SQL Server Cumulative and Security Updates are InstalledCIS SQL Server 2017 Database L1 DB v1.2.0MS_SQLDB
1.1 Ensure Latest SQL Server Cumulative and Security Updates are InstalledCIS SQL Server 2017 Database L1 DB v1.3.0MS_SQLDB

SYSTEM AND SERVICES ACQUISITION

1.1 Ensure Latest SQL Server Service Packs and Hotfixes are InstalledCIS SQL Server 2016 Database L1 DB v1.3.0MS_SQLDB
1.1 Ensure Latest SQL Server Service Packs and Hotfixes are InstalledCIS SQL Server 2016 Database L1 AWS RDS v1.3.0MS_SQLDB
1.1 Ensure the appropriate MongoDB software version/patches are installedCIS MongoDB 5 L1 DB v1.0.0MongoDB
1.1 Ensure the appropriate MongoDB software version/patches are installedCIS MongoDB 3.6 Database Audit L1 v1.0.0MongoDB
1.1 Ensure the Appropriate Version/Patches for Oracle Software Is InstalledCIS Oracle Server 19c DB Unified Auditing v1.1.0OracleDB
1.1 Ensure the Appropriate Version/Patches for Oracle Software Is InstalledCIS Oracle Server 19c DB Traditional Auditing v1.1.0OracleDB
1.1 Ensure the Appropriate Version/Patches for Oracle Software Is InstalledCIS Oracle Server 18c DB Traditional Auditing v1.0.0OracleDB
1.1 Ensure the Appropriate Version/Patches for Oracle Software Is InstalledCIS Oracle Server 18c DB Unified Auditing v1.0.0OracleDB
1.1.1 Ensure NGINX is installedCIS NGINX Benchmark v2.0.0 L1 LoadbalancerUnix
1.1.1 Ensure NGINX is installedCIS NGINX Benchmark v2.0.1 L1 ProxyUnix

SYSTEM AND SERVICES ACQUISITION

1.1.63 Ensure 'Extend Adobe Flash content setting to all content' is set to 'Disabled'CIS Microsoft Edge L2 v1.0.0Windows
1.2 Ensure the Image Profile VIB acceptance level is configured properlyCIS VMware ESXi 6.7 v1.3.0 Level 1 Bare MetalUnix

SYSTEM AND SERVICES ACQUISITION

1.3 Ensure no unauthorized kernel modules are loaded on the hostCIS VMware ESXi 6.7 v1.1.0 Level 1 Bare MetalUnix
2.1.6 Ensure the latest firmware is installedCIS Fortigate 7.0.x Level 2 v1.2.0FortiGate
2.9 Ensure Legacy EFI Is Valid and UpdatingCIS Apple macOS 12.0 Monterey v2.1.0 L1Unix
2.9 Ensure Legacy EFI Is Valid and Updating - checked regularlyCIS Apple macOS 10.15 Catalina v3.0.0 L1Unix

SYSTEM AND SERVICES ACQUISITION

2.9 Ensure Legacy EFI Is Valid and Updating - integrity-checkCIS Apple macOS 10.15 v2.1.0 L1Unix
2.9 Ensure Legacy EFI Is Valid and Updating - validCIS Apple macOS 11.0 Big Sur v3.0.0 L1Unix
2.9 Ensure Legacy EFI Is Valid and Updating - validCIS Apple macOS 10.15 Catalina v3.0.0 L1Unix

SYSTEM AND SERVICES ACQUISITION

2.11 Ensure EFI version is valid and being regularly checked - daemonCIS Apple macOS 10.14 v1.4.0 L1Unix
2.11 Ensure EFI version is valid and being regularly checked - daemonCIS Apple macOS 10.15 v1.4.0 L1Unix
2.11 Ensure EFI version is valid and being regularly checked - daemonCIS Apple macOS 11 v1.2.0 L1Unix
2.11 Ensure EFI version is valid and being regularly checked - integrity-checkCIS Apple macOS 10.15 v1.4.0 L1Unix
2.11 Ensure EFI Version Is Valid and Checked Regularly - integrity-checkCIS Apple macOS 10.15 v2.0.0 L1Unix
2.11 Ensure EFI Version Is Valid and Checked Regularly - validCIS Apple macOS 12.0 Monterey v1.0.0 L1Unix
4.1 Ensure the Latest Security Patches are AppliedCIS MariaDB 10.6 on Linux L1 v1.0.0Unix
4.2 Ensure device is not obviously jailbroken or compromisedAirWatch - CIS Apple iOS 17 Benchmark v1.1.0 End User Owned L1MDM

SYSTEM AND SERVICES ACQUISITION

4.2 Ensure device is not obviously jailbroken or compromisedMobileIron - CIS Apple iOS 17 v1.1.0 End User Owned L1MDM

SYSTEM AND SERVICES ACQUISITION

4.2 Ensure device is not obviously jailbroken or compromisedMobileIron - CIS Apple iPadOS 17 Institutionally Owned L1MDM

SYSTEM AND SERVICES ACQUISITION

4.12 Ensure the Latest Operating System Updates Are Installed On Your Virtual Machines in All ProjectsCIS Google Cloud Platform v1.3.0 L2GCP
4.12 Ensure the Latest Operating System Updates Are Installed On Your Virtual Machines in All ProjectsCIS Google Cloud Platform v2.0.0 L2GCP
5.5.3 Ensure Node Auto-Upgrade is enabled for GKE nodesCIS Google Kubernetes Engine (GKE) v1.3.0 L1GCP
5.5.3 Ensure Node Auto-Upgrade is enabled for GKE nodesCIS Google Kubernetes Engine (GKE) v1.4.0 L1GCP
5.9 Ensure Legacy EFI Is Valid and Updating - checked regularlyCIS Apple macOS 13.0 Ventura v1.0.0 L1Unix
5.10.1 Ensure Kubernetes Web UI is DisabledCIS Google Kubernetes Engine (GKE) v1.3.0 L1GCP
5.10.1 Ensure Kubernetes Web UI is DisabledCIS Google Kubernetes Engine (GKE) v1.1.0 L1 MasterGCP
5.10.1 Ensure Kubernetes Web UI is DisabledCIS Google Kubernetes Engine (GKE) v1.4.0 L1GCP
8.1 (L1) VMware Tools must be a version that has not reached End of General Support statusCIS VMware ESXi 8.0 v1.1.0 L1VMware

SYSTEM AND SERVICES ACQUISITION

9.8 Ensure that 'HTTP Version' is the Latest, if Used to Run the Web AppCIS Microsoft Azure Foundations v2.1.0 L1microsoft_azure

SYSTEM AND SERVICES ACQUISITION

9.8 Ensure that 'Java version' is the latest, if used to run the Web AppCIS Microsoft Azure Foundations v2.0.0 L1microsoft_azure
9.9 Ensure that 'HTTP Version' is the Latest, if Used to Run the Web AppCIS Microsoft Azure Foundations v2.0.0 L1microsoft_azure
20.3 Ensure 'Microsoft Internet Explorer is not installed on the system'CIS Microsoft Windows 10 EMS Gateway v2.0.0 L1Windows
20.41 Ensure 'Operating System is maintained at a supported servicing level'CIS Microsoft Windows Server 2019 STIG MS STIG v1.0.1Windows
20.42 Ensure 'Operating System is maintained at a supported servicing level'CIS Microsoft Windows Server 2016 STIG DC STIG v1.1.0Windows
20.42 Ensure 'Operating System is maintained at a supported servicing level'CIS Microsoft Windows Server 2016 STIG MS STIG v1.1.0Windows