Good set up for CIS4?

is this a bit too much protection for cis4, or just enough?

Proactive security
Antivirus on access, high heuristics
Sandbox off, parental controls on, suppress alerts
Protected files everything including C: drive

Only you can say how much protection is too much on your system…

Many like CIS to inform them of every action a program wants to make on their system, while others want to be protected with absolutely no interaction from their security application. It’s all personal preference.

I would leave the AV heuristics on Low though. High is prone to false positives. Also, running the AV in stateful mode is just as secure as on-access.