Home
Security Hardening
DISA STIG SQL Server 2014 Instance OS V2R2

DISA STIG SQL Server 2014 Instance OS V2R2

SQL4-00-014000 – SQL Server and/or the operating system must protect its audit configuration from unauthorized modification.
Details Protecting audit data also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting...
SQL4-00-014100 – SQL Server and the operating system must protect SQL Server audit features from unauthorized removal.
Details Protecting audit data also includes identifying and protecting the tools used to view and manipulate log data. Therefore, protecting...
SQL4-00-015350 – Software, applications, and configuration files that are part of, or related to, the SQL Server installation must be monitored to discover unauthorized changes.
Details When dealing with change control issues, it should be noted, any changes to the hardware, software, and/or firmware components...
SQL4-00-015400 – SQL Server software installation account(s) must be restricted to authorized users.
Details When dealing with change control issues, it should be noted, any changes to the hardware, software, and/or firmware components...
SQL4-00-015500 – Database software directories, including SQL Server configuration files, must be stored in dedicated directories, separate from the host OS and other applications.
Details When dealing with change control issues, it should be noted, any changes to the hardware, software, and/or firmware components...
SQL4-00-016500 – SQL Server must have the SQL Server Data Tools (SSDT) software component removed if it is unused.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...
SQL4-00-016600 – SQL Server must have the SQL Server Reporting Services (SSRS) software component removed if it is unused.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...
SQL4-00-016700 – SQL Server must have the SQL Server Integration Services (SSIS) software component removed if it is unused.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...
SQL4-00-016800 – SQL Server must have the SQL Server Analysis Services (SSAS) software component removed if it is unused.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...
SQL4-00-016805 – SQL Server must have the SQL Server Distributed Replay Client software component removed if it is unused.
Details Information systems are capable of providing a wide variety of functions and services. Some of the functions and services,...

DISA STIG SQL Server 2014 Instance OS V2R2

SQL4-00-014000 – SQL Server and/or the operating system must protect its audit configuration from unauthorized modification.

SQL4-00-014100 – SQL Server and the operating system must protect SQL Server audit features from unauthorized removal.

SQL4-00-015350 – Software, applications, and configuration files that are part of, or related to, the SQL Server installation must be monitored to discover unauthorized changes.

SQL4-00-015400 – SQL Server software installation account(s) must be restricted to authorized users.

SQL4-00-015500 – Database software directories, including SQL Server configuration files, must be stored in dedicated directories, separate from the host OS and other applications.

SQL4-00-016500 – SQL Server must have the SQL Server Data Tools (SSDT) software component removed if it is unused.

SQL4-00-016600 – SQL Server must have the SQL Server Reporting Services (SSRS) software component removed if it is unused.

SQL4-00-016700 – SQL Server must have the SQL Server Integration Services (SSIS) software component removed if it is unused.

SQL4-00-016800 – SQL Server must have the SQL Server Analysis Services (SSAS) software component removed if it is unused.

SQL4-00-016805 – SQL Server must have the SQL Server Distributed Replay Client software component removed if it is unused.