DISA Security Technical Implementation Guides (STIGs)
The STIG requirement record: identifiers, wording, status, severity, Check, Fix, mitigation and evidence – DISA Security Technical Implementation Guides (STIGs)

DISA Security Technical Implementation Guides (STIGs) REQ-6: REQ-6 Fix text: complete, specific, idempotent configuration steps with no finding statement

The Fix, completed only for Applicable-Configurable rows, gives specific instructions on how to configure the product to comply: all steps needed, in exact rather than general language, in numbered sequence for multi-step procedures, using action verbs (ensure, configure, set, select) rather than should, shall or please, not restating the requirement and containing no finding statement; after the steps are implemented the resulting system state must be the same however many times the instructions are followed.

Maintained by Gerard BlokdykControl text last updated

Other controls in The STIG requirement record: identifiers, wording, status, severity, Check, Fix, mitigation and evidence – DISA Security Technical Implementation Guides (STIGs)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.