# Security Technical Implementation Guide

> Mediated Wiki article. Canonical URL: https://mediated.wiki/source/Security_Technical_Implementation_Guide
> Markdown URL: https://mediated.wiki/source/Security_Technical_Implementation_Guide.md
> Source: https://en.wikipedia.org/wiki/Security_Technical_Implementation_Guide
> Source revision: 1284643343
> License: Creative Commons Attribution-ShareAlike 4.0 International (https://creativecommons.org/licenses/by-sa/4.0/)

A **Security Technical Implementation Guide** (**STIG**) is a configuration standard consisting of [cybersecurity](/source/Cybersecurity) requirements for a specific product.

## Standard

The use of STIGs enables a methodology for securing protocols within [networks](/source/Computer_network), [servers](/source/Server_(computing)), computers, and logical designs to enhance overall [security](/source/Computer_security). These guides, when implemented, enhance security for software, hardware, physical and logical architectures to further reduce vulnerabilities.

Examples where STIGs would be of benefit is in the configuration of a [desktop computer](/source/Desktop_computer) or an enterprise server. Most operating systems are not inherently secure,[1] which leaves them open to criminals such as identity thieves and computer hackers. A STIG describes how to minimize network-based attacks and prevent system access when the attacker is interfacing with the system, either physically at the machine or over a network. STIGs also describe maintenance processes such as software updates and [vulnerability](/source/Vulnerability_(computing)) [patching](/source/Patch_(computing)).

Advanced STIGs might cover the design of a corporate network, covering configurations of routers, databases, firewalls, domain name servers and switches.

## See also

- [CIA triad](/source/CIA_triad)
- [Information Assurance](/source/Information_Assurance)
- [Security Content Automation Protocol](/source/Security_Content_Automation_Protocol)

## References

1. ["Top 50 products having highest number of cve security vulnerabilities"](https://www.cvedetails.com/top-50-products.php)

## External links

- [NIST Security Configuration Checklists Repository](http://web.nvd.nist.gov/view/ncp/repository)
- [Security Technical Implementation Guides and Supporting Documents in the Public Area](https://public.cyber.mil/stigs/)
- [Online STIG search](https://cyber.trackr.live/)

---
Adapted from the Wikipedia article [Security Technical Implementation Guide](https://en.wikipedia.org/wiki/Security_Technical_Implementation_Guide) by Wikipedia contributors ([contributor history](https://en.wikipedia.org/wiki/Security_Technical_Implementation_Guide?action=history)). Available under [Creative Commons Attribution-ShareAlike 4.0 International](https://creativecommons.org/licenses/by-sa/4.0/). Changes may have been made.