DISA Security Technical Implementation Guides (STIGs) REQ-11: REQ-11 Additional rows: one row per setting or attack vector, and CCI-000366 for best practice

Where several configuration settings are needed to comply with a single SRG requirement the author inserts additional rows by duplicating the requirement's row and updating the specific content, each new row keeping the original IA control, CCI, SRG ID, SRG requirement and SRG check; additional rows are also used where some attack vectors of a requirement can be addressed and others cannot, with a STIG-specific requirement and status for each; and product security features that align with no SRG requirement but that the vendor recommends as best practice are added on rows carrying CCI-000366, the CCI intended for that purpose. No enhanced formatting (bold, italics, fonts, smart quotes) is used in the template.