Click on the Policy Template name to order the table according to Security Checks marked as default.
Access Security Checks | CIS for SQL Server 2000 | CIS for SQL Server 2005 | CIS for SQL Server 2008 | CIS for SQL Server 2008 | CIS for SQL Server 2012 | CIS for SQL Server 2014 | CIS for SQL Server 2016 | CIS for SQL Server 2017 | CIS for SQL Server 2019 | CIS for SQL Server 2022 | DISA-NIST STIG for SQL Server 2012 | DISA-NIST STIG for SQL Server 2014 | DISA-NIST STIG for SQL Server 2016 | European Union General Data Protection Regulation (GDPR) | HIPAA Guidelines for SQL Server | IDERA Level 1 - Basic Protection | IDERA Level 2 - Balanced Protection | IDERA Level 3 - Strong Protection | MS Best Practices Analyzer | NERC Critical Infrastructure Protection | PCI-DSS Guidelines for SQL Server | SNAC for SQL 2000 | SOX Section 404 | SRR Checklist for SQL Server 2000 | SRR Checklist for SQL Server 2005 or later |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Analysis Services Running | X | X | X | X | X | X | X | ||||||||||||||||||
Asymmetric Key Size | X | X | X | X | X | X | X | ||||||||||||||||||
Auto_Close set for contained databases | X | X | X | X | X | X | X | X | |||||||||||||||||
Backups compliance with RTO and RPO requirements | X | X | |||||||||||||||||||||||
BUILTIN/Administrators Is sysadmin | X | X | X | X | X | X | X | X | X | X | X | ||||||||||||||
CLR Enabled | X | X | X | X | X | X | X | X | X | X | |||||||||||||||
Common criteria compliance | X | X | X | X | |||||||||||||||||||||
Data Files On System Drive | X | X | X | X | |||||||||||||||||||||
Database-level Firewall Rules | X | X | X | ||||||||||||||||||||||
Databases Are Trustworthy | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||||||||
Default Trace Enabled | X | X | X | X | X | X | X | X | |||||||||||||||||
Full-Text Search Running | X | X | X | X | X | ||||||||||||||||||||
HADR is configured | X | X | |||||||||||||||||||||||
Hide Instance Option is set | X | X | X | X | X | X | X | X | X | X | |||||||||||||||
Integration Services | X | ||||||||||||||||||||||||
Linked servers are configured | |||||||||||||||||||||||||
Max Number of concurrent sessions | X | X | X | X | |||||||||||||||||||||
Maximum number of error log files | X | X | X | X | X | X | X | X | X | X | |||||||||||||||
Ole automation procedures | X | X | X | X | X | X | X | X | X | X | X | ||||||||||||||
Other General Domain Accounts | X | ||||||||||||||||||||||||
Replication Enabled | X | X | X | X | X | X | X | X | |||||||||||||||||
sa Account Not Disabled | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | |||||||||
sa Account Not Disabled Or Renamed | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||||
Sample Databases Exist | X | X | X | X | X | X | X | X | X | X | X | X | |||||||||||||
Server Is Domain Controller | X | X | X | X | X | X | X | ||||||||||||||||||
Server-level Firewall Rules | X | X | X | ||||||||||||||||||||||
Shutdown SQL Server on Trace Failure | X | X | X | ||||||||||||||||||||||
SQL Agent Mail | X | X | X | X | X | X | X | X | |||||||||||||||||
SQL Mail Or Database Mail Enabled | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | |||||||||
SQL Server Installation Directories On System Drive | X | X | X | X | |||||||||||||||||||||
SQL Server Version | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | |||||
System Table Updates | X | X | X | X | X | X | X | X | X | ||||||||||||||||
Transport Layer Security | X | X | |||||||||||||||||||||||
Unauthorized Account Check | X | X | X | X | X | ||||||||||||||||||||
User created 'sa' account does not exist | X | X | X | X | X | X | X | ||||||||||||||||||
VSS Writer Running | X | X | X | ||||||||||||||||||||||
xp_cmdshell Enabled | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | |||||||||
xp_cmdshell Proxy Account Exists | X | X | X | X | X | X | X | X |