SEARCH RESULTS


DISA – Security Technical Information Guide (STIG)     3.4 3.4.6 Configuration Management

https://www.cyber.mil/stigs/

This site contains the Security Technical Implementation Guides and Security Requirements Guides for the Department of Defense (DOD) information technology systems as mandated by DODI 8500.01. This guidance bridges the gap between the National Institute of Standards and Technology Special Publication 800-53 and risk management framework (RMF).

National Checklist Program Repository     3.4 3.4.6 Configuration Management

https://ncp.nist.gov/repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.