- Ensure Cloud Guard is enabled in the root compartment of the tenancy
- Ensure user IAM database password was created within the last 90 days
- Ensure OCI IAM policy does not grant 'manage all-resources in tenancy' unless it is the Tenant Admin Policy
- Ensure user auth token age is 90 days or less
- Ensure IAM password policy requires passwords to be at least 14 characters long