GuidesGuides

Plain-English guides to DISA STIG checklists and SCAP benchmarks — each one linked to the live, always-current catalog.

• What is a STIG checklist?

  What a STIG checklist contains, the statuses you record, and how to create one for your system's ATO.

• CKL vs CKLB: STIG checklist file formats

  The two STIG Viewer checklist formats — which viewer writes which, how they differ, and moving between them.

• STIG vs SCAP benchmark

  How a STIG and its SCAP benchmark fit together — what each covers, and why the rule IDs line up.

• Online STIG Viewer: read any DISA STIG in your browser

  How to read STIGs in the browser, and when you still need the desktop STIG Viewer.

• STIG checks explained: check text, fix text, and CAT I–III severity

  How to read a STIG check, what CAT I–III means, and which checks can be automated.