auditing-cis-benchmark
Audits a self-hosted CockroachDB cluster against the CIS CockroachDB Benchmark v1.0.0 Level 1 controls. Supports two audit depths — quick automated scans and full CIS audit procedures. Produces a structured PASS/FAIL/MANUAL report covering installation, system hardening, logging, user access, data protection, and CockroachDB settings. Use when preparing for CIS compliance assessments, hardening self-hosted deployments, or validating security posture against industry benchmarks.
- Version
- 1.0
- Compatibility
- CockroachDB self-hosted (all versions). Requires shell access to cluster nodes and SQL admin or VIEWACTIVITY privilege.
Pinned to revision 4e8964e24a5a, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/auditing-cis-benchmark/SKILL.md
- skills/auditing-cis-benchmark/cockroachdb-security-and-governance/auditing-cloud-cluster-security/SKILL.md
- skills/auditing-cis-benchmark/cockroachdb-security-and-governance/configuring-audit-logging/SKILL.md
- skills/auditing-cis-benchmark/cockroachdb-security-and-governance/configuring-log-export/SKILL.md
- skills/auditing-cis-benchmark/cockroachdb-security-and-governance/configuring-sso-and-scim/SKILL.md
- skills/auditing-cis-benchmark/cockroachdb-security-and-governance/enabling-cmek-encryption/SKILL.md
- skills/auditing-cis-benchmark/cockroachdb-security-and-governance/enforcing-password-policies/SKILL.md
- skills/auditing-cis-benchmark/cockroachdb-security-and-governance/hardening-user-privileges/SKILL.md
- skills/auditing-cis-benchmark/cockroachdb-security-and-governance/managing-tls-certificates/SKILL.md
- skills/auditing-cis-benchmark/cockroachdb-security-and-governance/preparing-compliance-documentation/SKILL.md
- skills/auditing-cis-benchmark/references/cis-controls.md
- skills/auditing-cis-benchmark/references/sample-report.md
- skills/auditing-cis-benchmark/references/sql-queries.md
Every link opens the file at its source, pinned to the revision this page describes.