Cloud SQL SQL Server instances should have 'external scripts enabled' set to 'off'

SOC 2

• CC6.3 The entity authorizes, modifies, or removes access to data, software, functions, and other protected information assets based on roles, responsibilities, or the system design and changes, giving consideration to the concepts of least privilege and segregation of duties, to meet the entity's objectives
• CC6.8: The entity implements controls to prevent or detect and act upon the introduction of unauthorized or malicious software to meet the entity's objectives.

NIST SP 800-53 Rev 5

• CM-7 Least Functionality
• SI-7 Software, Firmware, and Information Integrity

CIS GCP Benchmark v3.0.0

• 6.3.1 Ensure 'external scripts enabled' database flag for Cloud SQL SQL Server instance is set to 'off

CIS GCP Benchmark v4.0.0

• 6.3.1 Ensure 'external scripts enabled' Database Flag for Cloud SQL SQL Server Instance Is Set to 'off'

CIS GCP Benchmark v1.2.0

• 6.3.1 Ensure 'external scripts enabled' database flag for Cloud SQL SQL Server instance is set to 'off'

CIS GCP Benchmark v1.3.0

• 6.3.1 Ensure 'external scripts enabled' database flag for Cloud SQL SQL Server instance is set to 'off'

CIS GCP Benchmark v2.0.0

• 6.3.1 Ensure 'external scripts enabled' database flag for Cloud SQL SQL Server instance is set to 'off'

NIST Cybersecurity Framework v1.0

• PR.IP-1: A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g. concept of least functionality).
• PR.PT-3: The principle of least functionality is incorporated by configuring systems to provide only essential capabilities.