Primary references
Use the original standards below to check terminology and requirements. These references explain the standards; they do not endorse CISGuard or independently verify its product coverage.
← All benchmarks
CIS SQL Server 2022 Benchmark
CIS SQL Server 2022 Benchmark, continuously evidenced.
The CIS Microsoft SQL Server 2022 Benchmark v1.2.1 defines 47 security controls covering SQL Server installation, surface area, server settings, authentication, authorization, password policies, auditing, replication, and Transparent Data Encryption. CISGuard's agent validates each control with database-level evidence and continuous drift detection.
Database & Web ServerAgentAll plans
Quick Facts
SQL Server 2022 benchmark at a glance.
- Benchmark version
- v1.2.1
- Total controls
- 47
- Scan type
- Agent
- Available tier
- All plans
- Category
- Database & Web Server
- Drift detection
- Yes, between every scheduled scan
Coverage
What this benchmark actually covers.
- Installation + surface area minimization
- Server configuration (server-level options)
- Authentication + authorization
- Password policies + sa account hardening
- SQL Server auditing
- Transparent Data Encryption (TDE)
- Backup encryption
Frequently Asked
SQL Server 2022 questions, answered directly.
Does CISGuard support older SQL Server versions?
CISGuard ships the CIS Microsoft SQL Server 2022 benchmark (v1.2.1). Earlier SQL Server versions have no dedicated CISGuard benchmark; where they stay in service, exception management documents the operational risk and any compensating mitigations (network isolation, additional monitoring).
Can CISGuard validate Transparent Data Encryption?
Yes. CIS SQL Server 2022 Benchmark requires Transparent Data Encryption (TDE) for databases containing sensitive data. CISGuard validates TDE state per database, key source (database master key, customer-managed key in Key Vault), and encryption algorithm. Non-encrypted databases flagged as control failures unless exception is documented.
Does CISGuard support Azure SQL Database?
Azure SQL Database is covered by the CIS Azure Foundations Benchmark (database services section) and the CIS Azure Compute Benchmark, not by the SQL Server 2022 benchmark, which targets the boxed-product variant. CISGuard scans Azure SQL Database via the Azure Resource Manager API agentlessly.
Related Benchmarks
Often deployed together with SQL Server 2022.
Want a SQL Server 2022 scan of your environment?
Our compliance engineers will scope your environment and quote within one business day of an initial briefing.