diff --git a/sca/debian/cis_debian8_L2.yml b/sca/debian/cis_debian8_L2.yml
index 50dfd78dd..1e1d29243 100644
--- a/sca/debian/cis_debian8_L2.yml
+++ b/sca/debian/cis_debian8_L2.yml
@@ -263,7 +263,7 @@ checks:
       - 'f:/etc/audit/audit.rules -> r:^-w && r:/etc/issue && r:-p wa && r:-k system-locale'
       - 'f:/etc/audit/audit.rules -> r:^-w && r:/etc/issue.net && r:-p wa && r:-k system-locale'
       - 'f:/etc/audit/audit.rules -> r:^-w && r:/etc/hosts && r:-p wa && r:-k system-locale'
-      - 'f:/etc/audit/audit.rules -> r:^-w && r:/etc/sysconfig/network && r:-p wa && r:-k system-locale'
+      - 'f:/etc/audit/audit.rules -> r:^-w && r:/etc/network && r:-p wa && r:-k system-locale'
 
   - id: 2516
     title: "Ensure events that modify the system's Mandatory Access Controls are collected (SELinux)"
diff --git a/sca/debian/cis_debian9_L2.yml b/sca/debian/cis_debian9_L2.yml
index 09157c062..bb7e792de 100644
--- a/sca/debian/cis_debian9_L2.yml
+++ b/sca/debian/cis_debian9_L2.yml
@@ -261,7 +261,7 @@ checks:
       - 'f:/etc/audit/audit.rules -> r:^-w && r:/etc/issue && r:-p wa && r:-k system-locale'
       - 'f:/etc/audit/audit.rules -> r:^-w && r:/etc/issue.net && r:-p wa && r:-k system-locale'
       - 'f:/etc/audit/audit.rules -> r:^-w && r:/etc/hosts && r:-p wa && r:-k system-locale'
-      - 'f:/etc/audit/audit.rules -> r:^-w && r:/etc/sysconfig/network && r:-p wa && r:-k system-locale'
+      - 'f:/etc/audit/audit.rules -> r:^-w && r:/etc/network && r:-p wa && r:-k system-locale'
 
   - id: 3516
     title: "Ensure events that modify the system's Mandatory Access Controls are collected (SELinux)"