DISA STIG / SRG assessments
6 scoped review items and 6 evidence objectives.
Evidence preparation
Professional and MSP include scoped programs, evidence guidance, templates, readiness work queues and exports. Free keeps its ISO-only assessment scope and shared design.
Edition and coverage
User-selected official XCCDF benchmark revision. Workflow plus external benchmark/checklist import. Product STIG catalogs are supplied by the user from official sources; no universal STIG baseline or native SCC engine is bundled. Select a benchmark to inspect every rule and result. No automatic configuration changes or authorization claims. Original ITAF workflow and parser. Imported DISA/vendor benchmark content retains its source terms; no third-party catalog license is purchased or implied.
Native supporting observations, external tool results and manual evidence are reported separately. Missing results require review. An imported pass does not set an assessor decision.
C31-R1 is an installable development candidate. Clean installation and live environment acceptance remain pending. This website patch has not been deployed.