STIG Update

DISA recently released the following updated Security Guidance:  The automation portion of the April release will be held until the July maintenance release due to recent changes in automation processes and procedures, and upcoming changes to STIGs and SRGs from...

https://public.cyber.mil/announcement/stig-update-3/

DISA releases updates to the SRG/STIG Library Compilations.

These updates include the latest quarterly SRG/STIG update and newly released SRGs and STIGs published since the last quarterly update. Customers can obtain the compilation from the DoD Cyber Exchange website at https://public.cyber.mil/stigs/compilations/. Users who are unable to find and...

https://public.cyber.mil/announcement/disa-releases-updates-to-the-srg-stig-library-compilations-4/

STIG/SRG Updates for NIST SP 800-53 Rev 5 Set for July

DISA will be updating numerous STIGS and SRGs to bring them into compliance with changes from the fifth revision of the NIST SP 800-53. The STIG team will complete this work for the July maintenance release. Therefore, any routine STIG/SRG...

https://public.cyber.mil/announcement/stig-srg-updates-for-nist-sp-800-53-rev-5-set-for-july-2/

STIG/SRG updates for NIST SP 800-53 Rev 5 set for July

DISA will be updating the following STIGs for the July maintenance release to comply with changes from the NIST SP 800-53 Revision 5:    Apache Server 2.4 UNIX Server  Apache Server 2.4 Windows Server  Apache Server 2.4 Windows Site  Apache...

https://public.cyber.mil/announcement/stig-srg-updates-for-nist-sp-800-53-rev-5-set-for-july/

DISA releases RHEL 9 STIG with Ansible

The Defense Information Systems Agency recently released the RHEL 9 Security Technical Implementation Guide (STIG) with Ansible. This content is published as a resource to assist in the application of security guidance to systems. Customers who possess a Common Access Card...

https://public.cyber.mil/announcement/disa-releases-rhel-9-stig-with-ansible/
Topics

U.S. Government Notice and Consent

You are accessing a U.S. Government (USG) Information System (IS) that is provided for USG-authorized use only.

By using this IS (which includes any device attached to this IS), you consent to the following conditions:

· The USG routinely intercepts and monitors communications on this IS for purposes including, but not limited to, penetration testing, COMSEC monitoring, network operations and defense, personnel misconduct (PM), law enforcement (LE), and counterintelligence (CI) investigations.

· At any time, the USG may inspect and seize data stored on this IS.

· Communications using, or data stored on, this IS are not private, are subject to routine monitoring, interception, and search, and may be disclosed or used for any USG authorized purpose.

· This IS includes security measures (e.g., authentication and access controls) to protect USG interests – not for your personal benefit or privacy.

Notwithstanding the above, using this IS does not constitute consent to PM, LE or CI investigative searching or monitoring of the content of privileged communications, or work product, related to personal representation or services by attorneys, psychotherapists, or clergy, and their assistants. Such communications and work product are private and confidential. See User Agreement for details.