DISA Security Technical Implementation Guides (STIGs) PGM-2: PGM-2 NIST SP 800-53 controls per CNSSI 1253 apply beside the STIGs

Applying the SRGs and STIGs contributes to but does not replace the security requirements of DOD systems: the applicable NIST SP 800-53 controls must be applied to all systems and architectures on the baselines CNSSI 1253 defines from the confidentiality, integrity and availability categorisation of the system, and CNSSI 1253 with the required baselines is the policy requirement for any asset or information system. STIGs, with vendor confidential documentation, are a basis for assessing compliance with those controls and enhancements in support of assessment and authorization under the DOD Risk Management Framework.