Click on the Policy Template name to order the table according to Security Checks marked as default.
Access Security Checks | CIS for SQL Server 2000 | CIS for SQL Server 2005 | CIS for SQL Server 2008 | CIS for SQL Server 2008 R2 | CIS for SQL Server 2012 | CIS for SQL Server 2014 | CIS for SQL Server 2016 | CIS for SQL Server 2017 | CIS for SQL Server 2019 | CIS for SQL Server 2022 | DISA-NIST STIG for SQL Server 2012 | DISA-NIST STIG for SQL Server 2014 | DISA-NIST STIG for SQL Server 2016 | European Union General Data Protection Regulation (GDPR) | HIPAA Guidelines for SQL Server | IDERA Level 1 - Basic Protection | IDERA Level 2 - Balanced Protection | IDERA Level 3 - Strong Protection | MS Best Practices Analyzer | NERC Critical Infrastructure Protection | PCI-DSS Guidelines for SQL Server | SNAC for SQL 2000 | SOX Section 404 | SRR Checklist for SQL Server 2000 | SRR Checklist for SQL Server 2005 or later |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Always Encrypted | X | X | X | ||||||||||||||||||||||
Appropriate cryptographic modules have been used to encrypt data. | X | X | |||||||||||||||||||||||
Assembly host policy | X | X | X | X | X | X | X | X | |||||||||||||||||
Backup Encryption (Native) | |||||||||||||||||||||||||
Backup Encryption (Non-Native) | |||||||||||||||||||||||||
Certificate private keys were never exported | |||||||||||||||||||||||||
Contained database authentication type | X | X | X | X | X | X | X | ||||||||||||||||||
DAC Remote Access | X | X | X | X | X | X | X | X | X | X | X | X | X | X | |||||||||||
Dangerous Extended Stored Procedures (XSPs) | X | X | X | X | X | X | X | X | X | X | X | ||||||||||||||
Database Master Key encrypted by Service Master Key | X | X | X | X | |||||||||||||||||||||
Database Master Keys Encrypted by Password | X | X | |||||||||||||||||||||||
Database roles and members | X | X | |||||||||||||||||||||||
Dynamic Data Masking | X | X | |||||||||||||||||||||||
Encryption Methods | X | ||||||||||||||||||||||||
Files On Drives Not Using NTFS | X | X | X | X | X | X | X | X | X | X | X | ||||||||||||||
Fixed Roles Assigned To public Or guest | X | X | X | X | X | X | X | X | X | X | X | X | |||||||||||||
Guest User Enabled | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||
Linked server is running as a member of sysadmin group | X | X | X | ||||||||||||||||||||||
NTFS Folder Level Encryption | X | X | |||||||||||||||||||||||
Operating System Version | X | X | X | X | |||||||||||||||||||||
Public role permissions | X | X | X | ||||||||||||||||||||||
Remote Access | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | |||||||||
Required Administrative Accounts Do Not Exist | X | X | X | X | |||||||||||||||||||||
Row-Level Security | X | X | |||||||||||||||||||||||
Server roles and members | X | X | |||||||||||||||||||||||
Signed Objects | X | ||||||||||||||||||||||||
SQL Job permissions | X | ||||||||||||||||||||||||
SQL Jobs and Agent | X | ||||||||||||||||||||||||
SQL Server Browser Running | X | X | X | X | |||||||||||||||||||||
SQL Server database level encryption | X | X | X | X | |||||||||||||||||||||
Startup Stored Procedures | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||||||
Startup Stored Procedures Enabled | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||||||
Startup Stored Procedures permissions | X | X | |||||||||||||||||||||||
Stored Procedures Encrypted | X | X | X | X | X | X | X | X | X | ||||||||||||||||
Symmetric key | X | X | X | X | X | X | X | X | |||||||||||||||||
Symmetric Keys Not Encrypted with a Certificate | X | X | X | ||||||||||||||||||||||
Sysadmins Own Trustworthy Databases | X | X | X | X | X | X | X | X | |||||||||||||||||
Transparent Data Encryption | X | X | X | X | |||||||||||||||||||||
Unacceptable Database Ownership | X | X | X | X | |||||||||||||||||||||
User Defined Extended Stored Procedures (XSPs) | X | X | X | X | X | X | X | X | X |