Click on the Policy Template name to order the table according to Security Checks marked as default.
Access Security Checks | CIS for SQL Server 2000 | CIS for SQL Server 2005 | CIS for SQL Server 2008 | CIS for SQL Server 2008 R2 | CIS for SQL Server 2012 | CIS for SQL Server 2014 | CIS for SQL Server 2016 | CIS for SQL Server 2017 | CIS for SQL Server 2019 | DISA-NIST STIG for SQL Server 2012 | DISA-NIST STIG for SQL Server 2014 | DISA-NIST STIG for SQL Server 2016 | European Union General Data Protection Regulation (GDPR) | HIPAA Guidelines for SQL Server | IDERA Level 1 - Basic Protection | IDERA Level 2 - Balanced Protection | IDERA Level 3 - Strong Protection | MS Best Practices Analyzer | NERC Critical Infrastructure Protection | PCI-DSS Guidelines for SQL Server | SNAC for SQL 2000 | SOX Section 404 | SRR Checklist for SQL Server 2000 | SRR Checklist for SQL Server 2005 or later |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Always Encrypted | X | X | X | |||||||||||||||||||||
Appropriate cryptographic modules have been used to encrypt data. | X | X | ||||||||||||||||||||||
Assembly host policy | X | X | X | X | X | X | X | |||||||||||||||||
Backup Encryption (Native) | ||||||||||||||||||||||||
Backup Encryption (Non-Native) | ||||||||||||||||||||||||
Certificate private keys were never exported | ||||||||||||||||||||||||
Contained database authentication type | X | X | X | X | X | X | ||||||||||||||||||
DAC Remote Access | X | X | X | X | X | X | X | X | X | X | X | X | X | |||||||||||
Dangerous Extended Stored Procedures (XSPs) | X | X | X | X | X | X | X | X | X | X | X | |||||||||||||
Database Master Key encrypted by Service Master Key | X | X | X | X | ||||||||||||||||||||
Database Master Keys Encrypted by Password | X | X | ||||||||||||||||||||||
Database roles and members | X | X | ||||||||||||||||||||||
Dynamic Data Masking | X | X | ||||||||||||||||||||||
Encryption Methods | X | |||||||||||||||||||||||
Files On Drives Not Using NTFS | X | X | X | X | X | X | X | X | X | X | X | |||||||||||||
Fixed Roles Assigned To public Or guest | X | X | X | X | X | X | X | X | X | X | X | X | ||||||||||||
Guest User Enabled | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||
Linked server is running as a member of sysadmin group | X | X | X | |||||||||||||||||||||
NTFS Folder Level Encryption | X | X | ||||||||||||||||||||||
Operating System Version | X | X | X | X | ||||||||||||||||||||
Public role permissions | X | X | X | |||||||||||||||||||||
Remote Access | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | |||||||||
Required Administrative Accounts Do Not Exist | X | X | X | X | ||||||||||||||||||||
Row-Level Security | X | X | ||||||||||||||||||||||
Server roles and members | X | X | ||||||||||||||||||||||
Signed Objects | X | |||||||||||||||||||||||
SQL Job permissions | X | |||||||||||||||||||||||
SQL Jobs and Agent | X | |||||||||||||||||||||||
SQL Server Browser Running | X | X | X | X | ||||||||||||||||||||
SQL Server database level encryption | X | X | X | X | ||||||||||||||||||||
Startup Stored Procedures | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||||||
Startup Stored Procedures Enabled | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | X | ||||||||
Startup Stored Procedures permissions | X | X | ||||||||||||||||||||||
Stored Procedures Encrypted | X | X | X | X | X | X | X | X | X | |||||||||||||||
Symmetric key | X | X | X | X | X | X | X | |||||||||||||||||
Symmetric Keys Not Encrypted with a Certificate | X | X | X | |||||||||||||||||||||
Sysadmins Own Trustworthy Databases | X | X | X | X | X | X | X | X | ||||||||||||||||
Transparent Data Encryption | X | X | X | X | ||||||||||||||||||||
Unacceptable Database Ownership | X | X | X | X | ||||||||||||||||||||
User Defined Extended Stored Procedures (XSPs) | X | X | X | X | X | X | X | X | X |