DISA Security Technical Implementation Guides (STIGs) REQ-5: REQ-5 Check text: exact validation steps ending in 'If ..., this is a finding'

The Check, completed only for Applicable-Configurable rows, gives specific instruction on how to validate the product's configuration, including any information and procedures needed to validate the configured value, the system privileges required, whether local access is needed or the check can be performed remotely, whether the check affects reliability or availability, and for third-party tools the product and steps or, where many tools may be used, general instructions a familiar administrator can follow; it states any condition under which the check is not applicable at the top, does not restate the requirement, does not include steps that alter values, uses action verbs (verify, navigate, identify, type, obtain) rather than should, shall or please, gives exact steps in numbered sequence, may list example command output that itself complies unless a failure example is explained, and ends with a finding statement of the form 'If ..., this is a finding' (or where appropriate 'If ..., this is not a finding').