STIGs are published in the Extensible Configuration Checklist Description Format and DISA's STIG Viewer 3.x (replacing STIG Viewer 2.x and the separate SRG-STIG Applicability Guide) loads one or more XCCDF STIG files, extracts them from zipped packages including nested zips, keeps an internal library, sorts requirements by Group ID, Rule ID and STIG ID, searches all fields or one (Discussion, Check and Fix content, rule title, severity, STIG ID, Group ID, Rule ID, CCI, legacy ID), displays CCI data, compares STIGs, prints or exports the displayed requirements to HTML or CSV, and displays the PDF documents bundled with STIG packages; packages are verified by their digital signatures and integrity checks on installation.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.