STIG
Question:
What is a STIG?
Answer:
A Security Technical Implementation Guide is a DoD document created by DISA Field Security Operations for certain products and technologies. A STIG provides secure configuration guidance for a product to reduce the attack surface. STIGs do not exist for all products.
Question:
May I deploy a product if no STIG exists?
Answer:
Yes, based on mission need and with DAA approval.
Thanks for giving me cause to check into this stuff before I get too committed.
Cheers,
Scott.