¿Qué es Windows STIG?

What is windows STIG?

The Windows 10 Security Technical Implementation Guide (STIG) is published as a tool to improve the security of Department of Defense (DoD) information systems. This document is meant for use in conjunction with other applicable STIGs, such as, but not limited to, Browsers, Antivirus, and other desktop applications.

A Security Technical Implementation Guide (STIG) is a configuration standard consisting of cybersecurity requirements for a specific product. The use of STIGs enables a methodology for securing protocols within networks, servers, computers, and logical designs to enhance overall security.

While Windows 10 Pro can come preinstalled or through an OEM, Windows 10 Enterprise requires the purchase of a volume-licensing agreement. There are also two distinct license editions with Enterprise: Windows 10 Enterprise E3 and Windows 10 Enterprise E5.

RTM stands for release to manufacturing. Short for release to manufacturing, the version of a software product that is given to manufacturers to bundle into future versions of their hardware products.

An SCAP Benchmark is a collection of Security Content Automation Protocol (SCAP) content organized in XCCDF format. An SCAP Benchmark is an SCAP source data stream, also known as an XCCDF expressed data stream. The XCCDF file contains references to other files, such as the OVAL definitions and patches.

NIST guidelines for hardening server OS. Many organizations approach us with the request to be NIST 800-53 compliant, not fully understanding what that really means. Well, it is not their fault, as it is really easy to …

It should be noted that there is not one standard of hardening, and hardening is not a binary choice. The extent to which a Windows 10 system is hardened needs to be made in the context of organization need as well as a fair amount of common sense.

Supporting Resources : 1 Checklist Summary : The Windows 10 Security Technical Implementation Guide (STIG) is published as a tool to improve the security of Department of Defense (DoD) information systems. 2 Checklist Role : 3 Known Issues :

It is based on the principle of least privilege, or to configure a computer system to only do what you do normally and nothing more. Hardening is an integral part of information security and comprises the principles of deter, deny, delay and detection (and hardening covers the first three).