Security Technical Implementation Guide

A Security Technical Implementation Guide or STIG is a configuration standard consisting of cybersecurity requirements for a specific product.

These guides, when implemented, enhance security for software, hardware, physical and logical architectures to further reduce vulnerabilities.

Examples where STIGs would be of benefit is in the configuration of a desktop computer or an enterprise server.

Most operating systems are not inherently secure,[1] which leaves them open to criminals such as identity thieves and computer hackers.

STIGs also describe maintenance processes such as software updates and vulnerability patching.