What changed in Microsoft Skype for Business 2016 STIG V2R1V2R1 changes

Microsoft Skype for Business 2016 STIG V2R1 (2026-01-05) replaced V1R1 (2016-11-14): 4 checks added, 3 removed. It has 4 checks, against 3 in V1R1.

V2R1 checklistV1R1 checklist Compare V1R1 and V2R1 in STIG Compare

  • 4 added
  • 3 removed
  • 0 updated

Added in V2R1 (4)

  • V-238105CAT IIThe ability to store user passwords in Skype must be disabled.
  • V-238106CAT IISession Initiation Protocol (SIP) security mode must be configured.
  • V-238107CAT IIIn the event a secure Session Initiation Protocol (SIP) connection fails, the connection must be restricted from resorting to the unencrypted HTTP.
  • V-279949CAT IThe version of Skype running on the system must be a supported version.

Removed since V1R1 (3)

  • V-70901CAT IIThe ability to store user passwords in Skype must be disabled.
  • V-70903CAT IISession Initiation Protocol (SIP) security mode must be configured.
  • V-70905CAT IIIn the event a secure Session Initiation Protocol (SIP) connection fails, the connection must be restricted from resorting to the unencrypted HTTP.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R1 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.