What do you use to implement security controls?
First of all, implementation of security controls means to put security on your server, workstations or other information systems. The best guidance is where ever you can get it from. Your organization may provide resources to you. This could be process and procedures. You can also use security implementation guides https://public.cyber.mil/stigs/
But probably the best and most comprehensive source of implementation guidance is from the vendor of the system or OS you are using. For Cisco router security implementation they have guidance on Cisco.com (for example). Cisco probably won’t call them “security controls” but if you know you need to update the IOS, you would search their site for how to update the IOS and what is the most current IOS for your internetwork device.
implementation
STIG Update – Quarterly release: SRG-STIG_Library.zip
DISA has released updates to the SRG/STIG Library Compilations in .ZIP format to correspond with the latest quarterly SRG/STIG update cycle. This release also includes newly released SRGs and STIGs published since the last quarterly release of the SRG/STIG Library Compilations.
The SRG/STIG_Library.zip is a compilation of DoD Security Requirements Guides (SRGs), DoD Security Technical Implementation Guides (STIGs) ( provided in XCCDF or .pdf format), Checklists, Security Readiness Review (SRR) Tools that are available through the IASE web site’s STIG pages.
Two versions of the compilation are produced, an FOUO version and a NON-FOUO version entitled U_SRG-STIG_Library.zip and FOUO_SRG-STIG_Library.zip. The file name preceded by FOUO_ contains STIGs and related content that has been designated as FOUO. As such a DoD PKI certificate is required to download it. The file name preceded by U_ is the NON-FOUO version which does not contain FOUO. It is therefore downloadable by the general public. These compilations may be used and distributed in the same manner as the individually downloaded documents. The FOUO compilation as a whole and any separated FOUO content must be handled in accordance with customary FOUO handling and dissemination guidelines.
Please see “SRG/STIG Library Compilation READ ME” for additional information to include include download / extraction instructions and a FAQ.
All related files are available on IASE at: http://iase.disa.mil/
STIG Update – Announcement of the Draft BIND 9.X Security Technical Implementation Guide (STIG) Version 1
STIG Update – Announcement of the Draft BIND 9.X Security Technical Implementation Guide (STIG) Version 1
DoD has developed the Draft BIND 9.X Security Technical Implementation Guide (STIG) Version 1. This STIG is available on the NIPRNET at http://iase.disa.mil/stigs/
Please provide comments, recommended changes, and/or additions to the draft STIG by 30 September 2016 on the Comment Matrix spreadsheet. Comments should be sent via NIPRNet email to: disa.stig_spt@mail.mil with the title and version of the STIG in the subject line.
STIG Update – DISA has released the BlackBerry OS 10.3.x STIG Version 1
DISA has released the BlackBerry OS 10.3.x STIG Version 1. The requirements of the STIG become effective immediately. The STIG is available at http://iase.disa.mil/stigs/
For all STIG related questions, please contact the DISA STIG Customer Support Desk: disa.stig_spt@mail.mil
Update your subscriptions, modify your password or e-mail address, or stop subscriptions at any time on your Subscriber Preferences Page. You will need to use your email address to log in. If you have questions or problems with the subscription service, please visitsubscriberhelp.govdelivery.com
| GovDelivery, Inc. sending on behalf of the Defense Information Systems Agency (DISA) · 408 St. Peter Street, Suite 600 · St. Paul, MN 55102 · 1-800-439-1420 |
IBM DataPower STIG Version 1
DISA has released the IBM DataPower STIG Version 1. The requirements of the STIG become effective immediately. The STIG is available athttp://iase.disa.mil/stigs/
DISA Draft Tanium STIGs
DISA has developed the Draft Tanium 6.5 Security Technical Implementation Guides (STIGs)
The Draft STIG is available at: http://iase.disa.mil/stigs/
Please provide comments, recommended changes, and/or additions to the draft STIG by 20 January 2016 on the Comment Matrix spreadsheet, and send comments via NIPRNet email to: disa.stig_spt@mail.mil. Include the title and version of the STIGs in the subject line of your email.