DISA Security Technical Implementation Guides (STIGs) SRG-1: SRG-1 CCIs are the discrete, measurable items sourced from NIST SP 800-53; SRGs sit between CCIs and STIGs

Control Correlation Identifiers represent discrete, measurable and actionable items sourced from the information assurance controls of a policy such as NIST SP 800-53, and they let DOD organisations trace STIG compliance to the NIST controls mandated for federal agencies; Security Requirements Guides are collections of requirements applicable to a technology family and the intermediate step between CCIs and STIGs, and STIGs provide the product-specific information for validating and attaining compliance with the SRG requirements for that product's technology area. Every STIG requirement carries the IA control and CCI it derives from.