STIGS Checklist

Is there an inexpensive tool to help with the DoD STIGS process?

more ▼

asked Jun 13, 2011 at 08:09 AM in Default

avatar image

11 1 1 2

I work with them daily in my current job. what type of help are you looking for?

Jun 13, 2011 at 08:26 AM Shawn_Melton

I am looking for a program that will go through the check list and either fix the issues are describe what needs to be fixed. I am not sure if just one program will work or if there are a few that will do the job.

Jun 13, 2011 at 10:51 AM VWoman

If you are wanting something for the OS, BMC makes a product called BladeLogic that works directly with DoD checklist. They have not perfected it with the checklist for SQL Server yet.

Jul 02, 2011 at 12:28 PM Shawn_Melton
(comments are locked)
10|1200 characters needed characters left

2 answers: sort voted first

Well if you go to IASE's web site you can download the SRR scripts for SQL Server. This is a pre-written T-SQL script that will execute against your instance of SQL Server. You can find that here: http://iase.disa.mil/stigs/app_security/database/srrs.html

Caveat about the link above: Authentication is required to access the scripts themselves and that can only be done from government networks. An alternative would be to copy out all the T-SQL scripts within the checklist documents and combine them into one script, that document is publicly available.

A lot of the checks within the checklist have to do with procedural and/or just regular documentation on documenting your environment.

You will not find any applications that will do the checks per the checklist but there are applications out there that can help with reporting on applications and operating systems compliance for HIPPA or PCI. Which most of those are stricter or come close to what the checklist requires.

more ▼

answered Jun 13, 2011 at 11:28 AM

avatar image

6.6k 21 26 34

(comments are locked)
10|1200 characters needed characters left

Thanks so much for the help. I am looking into both options.

more ▼

answered Jul 12, 2011 at 09:59 AM

avatar image

11 1 1 2

(comments are locked)
10|1200 characters needed characters left
Your answer
toggle preview:

Up to 2 attachments (including images) can be used with a maximum of 524.3 kB each and 1.0 MB total.

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here



Answers and Comments

SQL Server Central

Need long-form SQL discussion? SQLserverCentral.com is the place.



asked: Jun 13, 2011 at 08:09 AM

Seen: 3008 times

Last Updated: Nov 25, 2014 at 09:08 AM

Copyright 2018 Redgate Software. Privacy Policy