DISA STIG
What is DISA STIG?
Defence Information Systems Agency Security Technical Implementation Guides that provide technical security configuration standards for US Department of Defense information systems. STIGs are based on NIST SP 800-53 controls.
Terms that appear alongside disa stig
Each of these is named in at least one of the same controls as disa stig. The number is how many controls name both.
- cis benchmarks 4 shared controls
- patch management 4 shared controls
- secure configuration 4 shared controls
- baseline 4 shared controls
- hardening 4 shared controls
- nist 3 shared controls
- system hardening 3 shared controls
- zero trust 2 shared controls
Frameworks that govern disa stig
What the standards actually require on disa stig
Requirements naming disa stig across 6 standards, quoted from the control text.
A STIG provides configurable operational security guidance for products being used by the DOD and does not equate to DOD approval for the procurement or use of the product.
disa-security-technical-implementation-guides-stigs::PGM-5 · PGM-5 The existence of a STIG is not DOD approval of the product →Establish and document configuration settings for system components in the most restrictive mode consistent with operations, using established benchmarks such as DISA STIGs, CIS Benchmarks or FIPS; implement them;
fbi-cjis-security-policy::CM-6 · CM-6 Configuration Settings →Establish/document configuration settings using checklists; CIS/USGCB/DISA STIG when available; HIGH baseline.
CM-6 · Configuration Settings →Establish/document configuration settings using checklists; CIS/USGCB/DISA STIG when available; HIGH baseline.
CM-6 · Configuration Settings →Kuwait NCF Protect function (Infrastructure). Network Security and Segmentation: defense in depth + perimeter (firewall + WAF + DDoS mitigation) + internal segmentation (microsegmentation + VLAN + zero-trust network access ZTNA) + east-west traffic inspection...
KNCF-Protect-Network-Configuration-Vulnerability-Physical-Secure-SDLC-Hardening-Patching-Drift · Kuwait NCF Protect + Network + Configuration + Vulnerability + Physical + Secure SDLC →Apply D3FEND HARDEN tactic to make compromise more difficult prior to attack. D3-AH Application Hardening (D3-DCE Dead Code Elimination + D3-EAL Exception Handler Pointer Validation + D3-PSL Pointer Authentication + D3-SU Software Update + D3-DLIC Driver Load...
MITRE-D3FEND-Harden-Tactic-Application-Credential-Message-Platform-Hardening-MFA-Encryption-Secure-Boot · MITRE D3FEND Harden Tactic + Application + Credential + Message + Platform + MFA + Encryption + Secure Boot →Questions people ask about disa stig
What is DISA STIG?
Why is DISA STIG important for compliance?
Which compliance frameworks address DISA STIG?
Where can I learn more about DISA STIG?
See how DISA STIG applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.