Additional sections involve runtime checks and other configurations that are out of scope for the image level. Their compliance must be configured and validated by operators in the deployed environment. The Minimus cassandra-hardened image is CIS-aligned and provides secure defaults with the required configuration hooks to implement these controls.

Section 1.6 involves time synchronization which is managed by the host or orchestration layer and inherited by the container.

Sections 3.1-3.3, 3.7-3.8 are runtime benchmarks that depend on deployment-specific inputs which cannot be controlled by Minimus.

Section 3.5 involves network binding which is determined at container startup and depends on the deployment configuration.

Sections 5.1-5.2 involve inter-node encryption and client encryption which depend on operator-provided certificates, cluster configuration and TLS configuration.