DISA Security Technical Implementation Guides (STIGs)
Vendor STIG development, validation, approval and publication – DISA Security Technical Implementation Guides (STIGs)

DISA Security Technical Implementation Guides (STIGs) DEV-3: Stage 1: ten requirements across all four statuses within two weeks

What does DEV-3 require?

Within two weeks of receiving the template the vendor returns it with ten requirements completed as a mix of all four statuses (Applicable-Configurable, Applicable-Inherently Meets, Applicable-Does Not Meet and Not Applicable); DISA reviews them and either accepts and tells the vendor to proceed or asks for updates and resubmission.

Maintained by Gerard BlokdykControl text last updated

Other controls in Vendor STIG development, validation, approval and publication – DISA Security Technical Implementation Guides (STIGs)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll DISA Security Technical Implementation Guides (STIGs) controls