SRG / STIG Tools

The DOD/DISA STIG Viewer tool provides the capability to view one or more XCCDF (Extensible Configuration Checklist Description Format) formatted STIGs in an easy-to-navigate, human-readable format. It is compatible with STIGs developed and published by DISA for the DOD. The purpose of STIG Viewer is to provide an intuitive graphical user interface that allows ease of access to the STIG content, along with additional search and sort functionality.

STIG Viewer 3 integrates the capabilities of two previous DISA tools: STIG Viewer 2 and the STIG-SRG Applicability Guide. The STIG Viewer 2.17 release will remain on Cyber Exchange for now, but the STIG-SRG Applicability Guide has been removed from Cyber Exchange because it has been fully incorporated into the new STIG Viewer 3 application. Please refer to the User Guide below or access it through the hamburger menu within the application.

Q: eMASS only uploads.ckl files, STIG viewer 3 saves files as .cklb. Will these files upload into emass?

A: No, the DISA eMASS PMO was made aware of the new .cklb format and is actively reviewing/planning for capability support in one of their upcoming production releases.

Q: How do I open previously created checklists from STIG Viewer 2.17?

A: Review page 35 of the user guide posted below.

Q: Will there be a JAR file release for STIG Viewer 3?

A: No, the viewer is no longer java based.

Q: Can STIG Viewer 3 be installed on a network drive and run locally?

A: No, the viewer needs to be installed and run locally.

Q: When I save a check list it is now saving as .cklb, what does that mean?

A: The “B” is related to the new file format used by STIG Viewer 3 for saving checklist files. The format is now a JSON file and no longer an XML.

• Updated CCI List
• Fixed issues causing AV programs to block the application
• Added V2 CKL Format Export
• Added ability to create a new checklist based on the current checklist
• Added “Asset Posture” to STIG/Checklist export menu
• Bug Fixes
  • Fixed XCCDF imports failing in some cases
  • Added error display for failed XCCDF imports
  • Fixed problem with a malformed STIG causing search and filter to stop working
• Updated Applicability Guide content for October 2023