Detections
Analytics

CSCv7|1.4

Title

Maintain Detailed Asset Inventory

Description

Maintain an accurate and up-to-date inventory of all technology assets with the potential to store or process information. This inventory shall include all hardware assets, whether connected to the organization's network or not.

Reference Item Details

Category: Inventory and Control of Hardware Assets

Audit Items

View all Reference Audit Items

NamePluginAudit Name
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Intune for Windows 10 v1.1.0 Bitlocker
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Intune for Windows 10 v1.1.0 L2 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Intune for Windows 11 v1.0.0 L1 + BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Stand-alone v1.0.1 L1 + BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Stand-alone v1.0.1 L2 + BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L1 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L2 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L2 + BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L2 + BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L1 + BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows Server 2022 v1.0.0 L1 DC
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows Server 2019 DC L1 v1.2.1
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows Server 2019 DC L1 v1.3.0
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 11 Stand-alone v1.0.0 L2 + BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 11 Stand-alone v1.0.0 L2 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 11 Stand-alone v1.0.0 BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Intune for Windows 11 v1.0.0 L2 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1 + BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Intune for Windows 11 v1.0.0 BitLocker
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L1 + BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L2 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 L2 + BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Intune for Windows 10 v1.1.0 L1 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows Server 2019 MS L1 v1.3.0
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows Server 2019 STIG MS L1 v1.0.1
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Enterprise (Release 21H1) v1.11.0 L2 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L2 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 L2 + BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows Server 2019 MS L1 v1.2.1
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Intune for Windows 11 v1.0.0 L2 + BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Stand-alone v1.0.1 BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows Server 2019 STIG DC L1 v1.0.1
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Intune for Windows 10 Release 2004 v1.0.1 Bitlocker
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows Server 2019 MS L1 v1.2.0
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Enterprise v1.12.0 BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 11 Stand-alone v1.0.0 L1 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Stand-alone v1.0.1 L2 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L2 + BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L2 + BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows Server 2019 DC L1 v1.2.0
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L1 + BL
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 11 Enterprise v1.0.0 L2 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L2 + BL + NG
18.8.26.1 Ensure 'Enumeration policy for external devices incompatible with Kernel DMA Protection' is set to 'Enabled: Block All'WindowsCIS Microsoft Windows 11 Stand-alone v1.0.0 L1 + BL