Latest STIGs
| Release Date | Title | Version |
|---|---|---|
| 2021-04-20 | Google Chrome Current Windows Security Technical Implementation Guide | 2 |
| 2021-04-19 | Cisco ISE NDM Security Technical Implementation Guide | 1 |
| 2021-04-16 | VMware vSphere 6.7 vCenter Security Technical Implementation Guide | 1 |
| 2021-04-16 | VMware vSphere 6.7 Virtual Machine Security Technical Implementation Guide | 1 |
| 2021-04-15 | VMware vSphere 6.7 UI Tomcat Security Technical Implementation Guide | 1 |
| 2021-04-15 | VMware vSphere 6.7 VAMI-lighttpd Security Technical Implementation Guide | 1 |
| 2021-04-15 | VMware vSphere 6.7 PostgreSQL Security Technical Implementation Guide | 1 |
| 2021-04-15 | VMware vSphere 6.7 STS Tomcat Security Technical Implementation Guide | 1 |
| 2021-04-15 | VMware vSphere 6.7 Perfcharts Tomcat Security Technical Implementation Guide | 1 |
| 2021-04-15 | VMware vSphere 6.7 EAM Tomcat Security Technical Implementation Guide | 1 |
| 2021-04-15 | VMware vSphere 6.7 Photon OS Security Technical Implementation Guide | 1 |
| 2021-04-14 | Kubernetes Security Technical Implementation Guide | 1 |
| 2021-04-14 | Cisco ISE NAC Security Technical Implementation Guide | 1 |
| 2021-04-06 | Oracle Database 12c Security Technical Implementation Guide | 2 |
| 2021-04-05 | Cisco IOS Switch NDM Security Technical Implementation Guide | 2 |
| 2021-04-05 | Oracle Database 11.2g Security Technical Implementation Guide | 2 |
| 2021-04-01 | Oracle Linux 7 Security Technical Implementation Guide | 2 |
| 2021-03-30 | z/OS ICSF for RACF Security Technical Implementation Guide | 6 |
| 2021-03-30 | z/OS ICSF for ACF2 Security Technical Implementation Guide | 6 |
| 2021-03-30 | IBM z/OS RACF Security Technical Implementation Guide | 8 |
STIG Viewing Tools
STIG Viewer User Guide (May 2021) 1.86 MB 22 Apr 2021. STIG Viewer Version 2.11 Change Log 67.5 KB 10 Aug 2020. STIG Viewer Video — 14 Jun 2018 Storage Area. Customize and filter your results with our built-in-tools, or complete your STIG Viewer checklist with our automated checklist integration. DoD ConfigOS has been widely implemented throughout the Department of Defense in classified and unclassified environments, tactical programs, weapon systems, disconnected labs, and cloud applications.
Microsoft PowerPoint - SCAPSTIG Viewer Tools.pptx Author: opruitt Created Date: 4/14/2017 4:28:11 PM.
XCCDF formatted SRGs and STIGs are intended be ingested into an SCAP validated tool for use in validating compliance of a Target of Evaluation (TOE). As such, getting to the content of a XCCDF formatted STIG to read and understand the content is not as easy as opening a .doc or .pdf file and reading it. The process can be a little confusing and trying. Below are tools which can be used to view the STIGs and a Whitepaper describing the STIG Viewing processes.
DISA has produced standalone versions of STIG Viewer for the Windows, Linux, and macOS platforms on 64-bit x86 processors. With the end of free support for Java 8 in early 2019, Oracle Corporation changed the licensing and distribution model for Java software. Users without supported Java 8 SE environments should use the standalone versions of STIG Viewer. Users with supported Java 8 SE environments may still use the current JAR file. DISA will base future STIG Viewer development on open-source software developed by the OpenJDK and OpenJFX projects.
| Title | Size | Updated |
|---|---|---|
| STIG Viewer User Guide (May 2021) | 1.86 MB | 22 Apr 2021 |
| STIG Viewer 2.14 Hashes | 1.36 KB | 22 Apr 2021 |
| STIG Viewer 2.14-Mac | 62.15 MB | 22 Apr 2021 |
| STIG Viewer 2.14-Linux | 71.57 MB | 22 Apr 2021 |
| STIG Viewer 2.14-Win64 | 61.03 MB | 22 Apr 2021 |
| STIG Viewer 2.14 | 712.99 KB | 22 Apr 2021 |
| How to Create and SRG-STIG ID Mapping Spreadsheet | 298.21 KB | 03 Feb 2021 |
| STIG Viewer Version 2.11 Change Log | 67.5 KB | 10 Aug 2020 |
| Vendor STIG Acronym List | 178.74 KB | 16 Jan 2020 |
| HOW_TO_VIEW_SRGs_and_STIGs | 79.49 KB | 30 Nov 2018 |
| STIG Viewer Video | — | 14 Jun 2018 |
| STIG Sorted by STIG ID | 103.46 KB | 30 Mar 2015 |
| STIG Sorted by Vulnerability ID | 101.59 KB | 30 Mar 2015 |
SRG/STIG Applicability Guide and Collection Tool
The purpose of the SRG/STIG Applicability Guide and Collection Tool is to assist the SRG/STIG user community in determining what SRGs and/or STIGs apply to a particular situation or Information System (IS) and to create a fully formatted document containing a “Collection” of SRGs and STIGs applicable to the situation being addressed.
The ISs or situations covered include a Base/Camp/Post/or Station (B/C/P/S), facility, Program /Service/major application, enclave, network, system, device, or vendor’s product.
The Collection document can serve as an artifact in the System Authorization and Risk Management processes.
The SRG/STIG Applicability Guide and Collection Tool will be updated periodically to include the most recent new SRG/STIG releases and sunset products.
For assistance, please contact disa.stig_spt@mail.mil
Disa Stig
Stig Viewer Not Working
| Title | Size | Updated |
|---|---|---|
| SRG-STIG Applicability Guide - User Guide v1.5 | 2.64 MB | 12 May 2021 |
| STIG Applicability Guide-Linux | 38.61 MB | 12 May 2021 |
| STIG Applicability Guide-Mac | 33.81 MB | 12 May 2021 |
| STIG Applicability Guide-Windows | 36.89 MB | 12 May 2021 |