Click on the Policy Template name to order the table according to Security Checks marked as default.
Access Security Checks | CIS for SQL Server 2000 | CIS for SQL Server 2005 | CIS for SQL Server 2008 | CIS for SQL Server 2008 R2 | CIS for SQL Server 2012 | CIS for SQL Server 2014 | CIS for SQL Server 2016 | CIS for SQL Server 2017 | CIS for SQL Server 2019 | CIS for SQL Server 2022 | DISA-NIST STIG for SQL Server 2012 | DISA-NIST STIG for SQL Server 2014 | DISA-NIST STIG for SQL Server 2016 | European Union General Data Protection Regulation (GDPR) | HIPAA Guidelines for SQL Server | IDERA Level 1 - Basic Protection | IDERA Level 2 - Balanced Protection | IDERA Level 3 - Strong Protection | MS Best Practices Analyzer | NERC Critical Infrastructure Protection | PCI-DSS Guidelines for SQL Server | SNAC for SQL 2000 | SOX Section 404 | SRR Checklist for SQL Server 2000 | SRR Checklist for SQL Server 2005 or later |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Active Directory Helper Login Account Not Acceptable | X | X | X | X | X | X | X | X | |||||||||||||||||
Analysis Services Login Account Not Acceptable | X | X | X | X | X | X | X | X | X | ||||||||||||||||
Blank Passwords | X | X | X | X | X | X | X | ||||||||||||||||||
DISTRIBUTOR_ADMIN Login | X | ||||||||||||||||||||||||
Ensure Windows BUILTIN Groups are not SQL Logins | X | X | X | X | X | X | X | X | X | X | |||||||||||||||
Ensure Windows Local Groups are not SQL Logins | X | X | X | X | X | X | X | X | X | X | |||||||||||||||
Full-Text Search Login Account Not Acceptable | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||||||
Integration Services Login Account Not Acceptable | X | X | X | X | X | X | X | X | X | X | |||||||||||||||
Notification Services Login Account Not Acceptable | X | X | X | X | X | X | X | X | X | ||||||||||||||||
Orphaned users | X | X | X | X | X | X | X | X | X | X | |||||||||||||||
Reporting Services Login Account Not Acceptable | X | X | X | X | X | X | X | ||||||||||||||||||
sa Account Has Blank Password | X | X | X | X | X | X | X | X | X | X | X | ||||||||||||||
sa Account Not Using Password Policy | X | X | X | X | |||||||||||||||||||||
SQL Authentication Enabled | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||
SQL Logins not using Must Change | X | X | X | X | X | X | X | X | |||||||||||||||||
SQL Logins Not Using Password Expiration | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||||
SQL Logins Not Using Password Policy | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||
SQL Server Agent Login Account Not Acceptable | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||||||
SQL Server Browser Login Account Not Acceptable | X | X | X | X | X | X | X | X | X | ||||||||||||||||
SQL Server Service Login Account Not Acceptable | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | |||||||
SQL Server SYSADMIN accounts | X | ||||||||||||||||||||||||
Suspect Logins | X | X | X | X | X | X | X | X | |||||||||||||||||
Unauthorized SQL Logins Exist | X | X | X | X | X | X | X | ||||||||||||||||||
VSS Writer Login Account Not Acceptable | X | X | X | X | X | X | X | ||||||||||||||||||
Weak Passwords | X | X | X | X | X |