question

VWoman avatar image
VWoman asked

STIGS Checklist

Is there an inexpensive tool to help with the DoD STIGS process?
sqlsecurity
3 comments
10 |1200

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Shawn_Melton avatar image Shawn_Melton commented ·
If you are wanting something for the OS, BMC makes a product called BladeLogic that works directly with DoD checklist. They have not perfected it with the checklist for SQL Server yet.
1 Like 1 ·
Shawn_Melton avatar image Shawn_Melton commented ·
I work with them daily in my current job. what type of help are you looking for?
0 Likes 0 ·
VWoman avatar image VWoman commented ·
I am looking for a program that will go through the check list and either fix the issues are describe what needs to be fixed. I am not sure if just one program will work or if there are a few that will do the job.
0 Likes 0 ·
Shawn_Melton avatar image
Shawn_Melton answered
Well if you go to IASE's web site you can download the SRR scripts for SQL Server. This is a pre-written T-SQL script that will execute against your instance of SQL Server. You can find that here: http://iase.disa.mil/stigs/app_security/database/srrs.html
**Caveat about the link above:** *Authentication is required to access the scripts themselves and that can only be done from government networks. An alternative would be to copy out all the T-SQL scripts within the checklist documents and combine them into one script, that document is publicly available*. A lot of the checks within the checklist have to do with procedural and/or just regular documentation on documenting your environment.
You will not find any applications that will do the checks per the checklist but there are applications out there that can help with reporting on applications and operating systems compliance for HIPPA or PCI. Which most of those are stricter or come close to what the checklist requires.
10 |1200

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

VWoman avatar image
VWoman answered
Thanks so much for the help. I am looking into both options.
10 |1200

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.