DISA Security Technical Implementation Guides (STIGs) REQ-1: REQ-1 Every STIG requirement carries its IA control, CCI, SRG ID and, once finalised, its STIG ID

The STIG template prepopulates, and the STIG author must not change, the NIST SP 800-53 IA control from which the requirement is sourced, the CCI that lets DOD organisations trace compliance to the NIST control, the SRG ID of the SRG requirement (which may carry the parent SRG's identification), the SRG requirement sentence, the SRG vulnerability discussion and the SRG check and fix; DISA populates the STIG ID during finalisation. In the published XCCDF the CCI appears as the CCI ID, the SRG ID as the rule name, the STIG ID beside the Vulnerability ID, and STIG Viewer sorts and searches by Group ID, Rule ID, STIG ID, CCI and legacy ID.