STIG CompareSTIG Compare

See what changed between two release cycles

PairSelect Baseline and Compare
Baseline
Compare

Choose a STIG, then pick two releases. Baseline is your reference; Compare is assessed against it. Click vs to swap.

Compare two release cycles

Select a STIG and two versions above to see added, removed, and modified procedures.

About STIG Compare

STIG Compare shows what changed between two releases of a DISA Security Technical Implementation Guide: the checks DISA added, the checks it removed, and the checks whose text changed, with every change highlighted word by word. Pick a STIG, set the Baseline to the release you're assessing, usually the newest, and Compare to an earlier one: added checks are on the Baseline but not in the earlier release, removed checks the reverse.

What it compares

Checks are matched across the two releases by V-number. When DISA gives a check a new rule revision, STIG Compare compares its title, severity, check text, fix text, discussion, CCIs, rule version and documentable flag, and lists only the fields that actually changed. Narrow the results to added or removed checks, or to the fields you care about, such as check or fix text.

When to use it

  • Moving a checklist to a new release. Statuses for unchanged checks can carry over; re-review the added and updated checks instead of starting the .ckl over.
  • ATO and continuous monitoring. Show an assessor exactly what DISA changed between the release you were assessed against and the current one.
  • Planning remediation. New CAT I checks and changed fix text are where the work is; changed discussion or wording usually isn't.

How often STIGs change

DISA updates STIGs every quarter, with out-of-cycle releases in between for new products or urgent fixes. STIG Vault picks up each release automatically, and every STIG's latest release gets its own page of changes, linked from the STIG and from the A–Z list of STIG checklists.

Recent STIG release changes