Application Security and Development Security Technical Implementation Guide

The Application Security and Development Security Technical Implementation Guide (V6 R5) has 286 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

286STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V6 · R5

CurrentPublished Wed Sep 30 2026

The ISSO must report all suspected violations of IA policies in accordance with DoW information system IA procedures.

Application Security and Development Security Technical Implementation Guide

Assessment Title

Rule Text

The ISSO must report all suspected violations of IA policies in accordance with DoW information system IA procedures.

Description

Discussion Text

Violations of IA policies must be reviewed and reported. If there are no policies regarding the reporting of IA violations, IA violations may not be tracked or addressed in a proper manner.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-222623

Rule

SV-222623r1263603_rule

Severity

medium

Rule Version

APSC-DV-002920

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Interview the application representative and review the SOPs to ensure that violations of IA policies are analyzed and reported.
 
If there is no policy for reporting IA violations, this is a finding.

Implementation Procedure

Fix Text

Create and maintain a policy to report IA violations.

STIG check 235 of 286 in the Application Security and Development STIG checklist

← Previous · V-222622The ISSO must review audit trails periodically based on system documentation recommendations or immediately upon system security events.Next · V-222624 →The ISSO must ensure active vulnerability testing is performed.