thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

Security Technical Implementation Guide (STIG)

DISA configuration standards for securing DoD information systems and software.

Definition

STIGs provide detailed configuration requirements categorized by severity (CAT I high, CAT II medium, CAT III low). They are mandatory for DoD systems and are checked with SCAP tools and STIG Viewer. Findings feed RMF assessments and POA&Ms.

Example

A CAT I finding notes that a server allows anonymous SID enumeration.

Exam tip

CAT I is the most severe STIG finding.

Related terms