dido:99_annexes:annex-b-terms-and-definitions:s:stig

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

dido:99_annexes:annex-b-terms-and-definitions:s:stig [2026/07/13 12:00] – created nick_didodido:99_annexes:annex-b-terms-and-definitions:s:stig [2026/07/18 12:33] (current) – external edit 127.0.0.1
Line 7: Line 7:
 A Security Technical Implementation Guide (STIG) specifies security configuration requirements for an information technology product, system, service, platform, or technology. A Security Technical Implementation Guide (STIG) specifies security configuration requirements for an information technology product, system, service, platform, or technology.
  
-The Defence Information Systems Agency (DISA) publishes STIGs for the United States Department of Defence information systems. A STIG translates applicable security controls and risk-management expectations into product-specific or technology-specific configuration requirements and assessment checks.+The Defense Information Systems Agency (DISA) publishes STIGs for the United States Department of Defense information systems. A STIG translates applicable security controls and risk-management expectations into product-specific or technology-specific configuration requirements and assessment checks.
  
 A STIG may identify required settings, prohibited configurations, vulnerability identifiers, severity categories, check procedures, remediation instructions, and references to associated security controls. A STIG may identify required settings, prohibited configurations, vulnerability identifiers, severity categories, check procedures, remediation instructions, and references to associated security controls.
Line 21: Line 21:
 ===== Source ===== ===== Source =====
  
-Generalised from the Security Technical Implementation Guides published by the United States Department of Defence and the Defence Information Systems Agency, and specialised for the Crucible architecture and operational model.+Generalised from the Security Technical Implementation Guides published by the United States Department of Defense and the Defense Information Systems Agency, and specialized for the Crucible architecture and operational model.
  
-DISA identifies STIGs as security guidance for Department of Defence information technology systems and describes them as a bridge between NIST SP 800-53 and the Risk Management Framework.+DISA identifies STIGs as security guidance for Department of Defense information technology systems and describes them as a bridge between NIST SP 800-53 and the Risk Management Framework.
  
 ===== Note ===== ===== Note =====
  • dido/99_annexes/annex-b-terms-and-definitions/s/stig.1783969234.txt.gz
  • Last modified: 2026/07/13 12:00
  • by nick_dido