CyberStrikeus/CyberStrike - Page 167

cis-gworkspace-4-1-2-1

Ensure Super Admin account recovery is disabled

cis-gworkspace-4-1-2-2

Ensure User account recovery is enabled

cis-gworkspace-4-1-3-1

Ensure Advanced Protection Program is configured

cis-gworkspace-4-1-4-1

Ensure login challenges are enforced

cis-gworkspace-4-1-5-1

Ensure password policy is configured for enhanced security

cis-gworkspace-4-2-1-1

Ensure application access to Google services is restricted

cis-gworkspace-4-2-1-2

Review third-party applications periodically

cis-gworkspace-4-2-1-3

Ensure internal apps can access Google Workspace APIs

cis-gworkspace-4-2-1-4

Review domain-wide delegation for applications periodically

cis-gworkspace-4-2-2-1

Ensure blocking access from unapproved geographic locations

cis-gworkspace-4-2-3-1

Ensure DLP policies for Google Drive are configured

cis-gworkspace-4-2-4-1

Ensure Google session control is configured

cis-gworkspace-4-2-5-1

Ensure Google Cloud session control is configured

cis-gworkspace-4-2-6-1

Ensure less secure app access is disabled

cis-gworkspace-4-3-1

Ensure the Dashboard is reviewed regularly for anomalies

cis-gworkspace-4-3-2

Ensure the Security health is reviewed regularly for anomalies

cis-gworkspace-5-1-1-1

Ensure the App Usage Report is reviewed regularly for anomalies

cis-gworkspace-5-1-1-2

Ensure the Security Report is reviewed regularly for anomalies

cis-gworkspace-6-1

Ensure User's password changed is configured

cis-gworkspace-6-2

Ensure Government-backed attacks is configured

cis-gworkspace-6-3

Ensure User suspended due to suspicious activity is configured

cis-gworkspace-6-4

Ensure User granted Admin privilege is configured

cis-gworkspace-6-5

Ensure Suspicious programmatic login is configured

cis-gworkspace-6-6

Ensure Suspicious login is configured

cis-gworkspace-6-7

Ensure Leaked password is configured

cis-gworkspace-6-8

Ensure Gmail potential employee spoofing is configured

cis-azure-compute-15-1

Ensure Batch account is set to use customer-managed keys to encrypt data

cis-azure-compute-15-2

Ensure Batch pools disk encryption is set enabled

cis-azure-compute-15-3

Ensure local authentication methods for accounts are disabled

cis-azure-compute-15-4

Ensure Private endpoints are considered for Batch accounts

cis-azure-compute-15-5

Ensure public network access is disabled for Batch accounts

cis-azure-compute-15-6

Ensure private DNS zones for private endpoints that connect to Batch accounts are configured

cis-azure-compute-15-7

Ensure Diagnostics settings logs for Batch accounts are enabled

cis-azure-compute-2-1-1

Ensure 'Java version' is currently supported (if in use)

cis-azure-compute-2-1-10

Ensure 'Remote debugging' is set to 'Off'

cis-azure-compute-2-1-11

Ensure incoming client certificates are enabled and required (if in use)

cis-azure-compute-2-1-12

Ensure 'App Service authentication' is set to 'Enabled'

cis-azure-compute-2-1-13

Ensure managed identities are configured

cis-azure-compute-2-1-14

Ensure public network access is disabled

cis-azure-compute-2-1-15

Ensure App Service plan SKU supports private endpoints