# STIG

Published articles for STIG.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Cisco and the DISA STIG: Turning Zero Trust Policy into Repeatable Practice - Part 2: Cisco SNA

DevFeed: [Cisco and the DISA STIG: Turning Zero Trust Policy into Repeatable Practice - Part 2: Cisco SNA](<https://devfeed.tech/articles/cisco-and-the-disa-stig-turning-zero-trust-policy-into-repeatable-practice-part-2-cisco-sna-26716.md>)

Original publisher: [Read original article](<https://blogs.cisco.com/industries/cisco-and-the-disa-stig-turning-zero-trust-policy-into-repeatable-practice-part-2-cisco-sna>)

Author: Norman St. Laurent

Published: 2026-09-15T13:13:53Z

Content type: article

Language: en

Sources: [Cisco Blogs](<https://devfeed.tech/sources/cisco-blogs.md>)

Topics: [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Cisco](<https://devfeed.tech/topics/cisco.md>), [telemetry](<https://devfeed.tech/topics/telemetry.md>), [Zero Trust](<https://devfeed.tech/topics/zero-trust.md>), [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [Network](<https://devfeed.tech/topics/network.md>)

Tags: [benchmark](<https://devfeed.tech/tags/benchmark.md>), [cisco](<https://devfeed.tech/tags/cisco.md>), [cisco-secure-network-analytics-sna](<https://devfeed.tech/tags/cisco-secure-network-analytics-sna.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [department-of-defense-dod](<https://devfeed.tech/tags/department-of-defense-dod.md>), [government](<https://devfeed.tech/tags/government.md>), [hardening](<https://devfeed.tech/tags/hardening.md>), [industries](<https://devfeed.tech/tags/industries.md>), [nist](<https://devfeed.tech/tags/nist.md>), [public-sector](<https://devfeed.tech/tags/public-sector.md>), [stig](<https://devfeed.tech/tags/stig.md>), [visibility](<https://devfeed.tech/tags/visibility.md>)

### AI overview

The article explains how the DISA Security Technical Implementation Guide for Cisco Secure Network Analytics turns Zero Trust policy into testable configuration requirements. The STIG provides a shared hardening baseline for the platform and its management functions, with 31 requirements derived from NIST SP 800-53 and related requirements.

### Source excerpt

Discover how the new DISA STIG for Cisco Secure Network Analytics helps defense organizations securely configure and harden their analytics platform, ensuring trusted network visibility for Zero Trust operations.

## Introducing the Chainguard cinc-auditor image: STIG scanning for Chainguard Containers, ready to run

DevFeed: [Introducing the Chainguard cinc-auditor image: STIG scanning for Chainguard Containers, ready to run](<https://devfeed.tech/articles/introducing-the-chainguard-cinc-auditor-image-stig-scanning-for-chainguard-containers-ready-to-run-13123.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/introducing-the-chainguard-cinc-auditor-image-stig-scanning-for-chainguard-containers-ready-to-run>)

Published: 2026-06-18T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [chainguard containers](<https://devfeed.tech/topics/chainguard-containers.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [anchore](<https://devfeed.tech/topics/anchore.md>), [Open Source](<https://devfeed.tech/topics/open-source.md>)

Tags: [anchore](<https://devfeed.tech/tags/anchore.md>), [anchore-enterprise](<https://devfeed.tech/tags/anchore-enterprise.md>), [apache](<https://devfeed.tech/tags/apache.md>), [built-from-source](<https://devfeed.tech/tags/built-from-source.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-containers](<https://devfeed.tech/tags/chainguard-containers.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [cinc-auditor](<https://devfeed.tech/tags/cinc-auditor.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [pipeline](<https://devfeed.tech/tags/pipeline.md>), [scanner](<https://devfeed.tech/tags/scanner.md>), [stig](<https://devfeed.tech/tags/stig.md>), [stigs](<https://devfeed.tech/tags/stigs.md>)

### AI overview

Chainguard introduces a ready-to-run cinc-auditor container image for STIG scanning of Chainguard Containers. The image includes a maintained GPOS SRG InSpec profile, removes separate profile and dependency setup, and supports production compliance pipelines, including FedRAMP workflows.

### Source excerpt

Chainguard launches a ready-to-run STIG scanner with a built-in GPOS SRG InSpec profile, simplifying compliance scans for containers and FedRAMP workflows.

## CMMC Phase 2, explained: Requirements, deadlines, and who's affected

DevFeed: [CMMC Phase 2, explained: Requirements, deadlines, and who's affected](<https://devfeed.tech/articles/cmmc-phase-2-explained-requirements-deadlines-and-who-s-affected-13009.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/cmmc-phase-2-explained>)

Published: 2026-04-29T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [Security & Privacy](<https://devfeed.tech/topics/security-privacy.md>), [Cryptography](<https://devfeed.tech/topics/cryptography.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [vulnerability scanning](<https://devfeed.tech/topics/vulnerability-scanning.md>), [Encryption](<https://devfeed.tech/topics/encryption.md>), [MFA](<https://devfeed.tech/topics/mfa.md>)

Tags: [certificates](<https://devfeed.tech/tags/certificates.md>), [cmmc](<https://devfeed.tech/tags/cmmc.md>), [cmmc-container-images](<https://devfeed.tech/tags/cmmc-container-images.md>), [cmmc-phase-2](<https://devfeed.tech/tags/cmmc-phase-2.md>), [cmvp](<https://devfeed.tech/tags/cmvp.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cybersecurity-maturity-model-certification](<https://devfeed.tech/tags/cybersecurity-maturity-model-certification.md>), [fips](<https://devfeed.tech/tags/fips.md>), [nist](<https://devfeed.tech/tags/nist.md>), [sboms](<https://devfeed.tech/tags/sboms.md>), [stig](<https://devfeed.tech/tags/stig.md>), [stigs](<https://devfeed.tech/tags/stigs.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [u-s-dod](<https://devfeed.tech/tags/u-s-dod.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>), [vulnerability-scanning](<https://devfeed.tech/tags/vulnerability-scanning.md>)

### AI overview

This article explains the requirements, deadlines, and scope of CMMC Phase 2. It describes the CMMC Level 2 certification requirements for organizations handling Controlled Unclassified Information or supporting Department of Defense and certain civilian agency contracts, including MFA, encryption, vulnerability scanning, supported systems, independent assessments, and compliance documentation.

### Source excerpt

CMMC Phase 2 and NIST 800-171 are here. Learn how Chainguard helps teams meet compliance with FIPS, STIGs, and zero-CVE containers.

## Chainguard's FIPS-validated, hardened VM images: compliance without the complexity

DevFeed: [Chainguard's FIPS-validated, hardened VM images: compliance without the complexity](<https://devfeed.tech/articles/chainguard-s-fips-validated-hardened-vm-images-compliance-without-the-complexity-12987.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguards-fips-validated-hardened-vm-images-compliance-without-the-complexity>)

Published: 2025-11-20T00:00:00Z

Content type: news

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard vms](<https://devfeed.tech/topics/chainguard-vms.md>), [Security](<https://devfeed.tech/topics/security.md>), [Deployment](<https://devfeed.tech/topics/deployment.md>), [configuration](<https://devfeed.tech/topics/configuration.md>)

Tags: [announce](<https://devfeed.tech/tags/announce.md>), [benchmark](<https://devfeed.tech/tags/benchmark.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-vm-images](<https://devfeed.tech/tags/chainguard-vm-images.md>), [chainguard-vms](<https://devfeed.tech/tags/chainguard-vms.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [fips](<https://devfeed.tech/tags/fips.md>), [fips-140-3](<https://devfeed.tech/tags/fips-140-3.md>), [fips-virtual-machine-images](<https://devfeed.tech/tags/fips-virtual-machine-images.md>), [fips-vms](<https://devfeed.tech/tags/fips-vms.md>), [secure-boot](<https://devfeed.tech/tags/secure-boot.md>), [security](<https://devfeed.tech/tags/security.md>), [stig](<https://devfeed.tech/tags/stig.md>), [stig-hardening](<https://devfeed.tech/tags/stig-hardening.md>)

### AI overview

Chainguard announces compliance capabilities for Chainguard VMs, including FIPS 140-3-validated cryptography, DISA STIG hardening, CIS Benchmark Level 1 hardening, and Secure Boot enabled by default. The updates are intended to help regulated organizations deploy secure, audit-ready VM infrastructure while reducing the engineering effort required for compliance.

### Source excerpt

Chainguard VM images are FIPS 140-3 validated, STIG-hardened, and CIS-compliant, giving regulated industries instant, secure, and audit-ready infrastructure.

## Chainguard Images are the Gold Standard for PCI DSS v4.0

DevFeed: [Chainguard Images are the Gold Standard for PCI DSS v4.0](<https://devfeed.tech/articles/chainguard-images-are-the-gold-standard-for-pci-dss-v4-0-12954.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguard-images-are-the-gold-standard-for-pci-dss-v4-0>)

Published: 2025-02-03T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [container-security](<https://devfeed.tech/topics/container-security.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [chainguard-sboms](<https://devfeed.tech/tags/chainguard-sboms.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container](<https://devfeed.tech/tags/container.md>), [container-image](<https://devfeed.tech/tags/container-image.md>), [container-image-compliance](<https://devfeed.tech/tags/container-image-compliance.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [container-security](<https://devfeed.tech/tags/container-security.md>), [containers](<https://devfeed.tech/tags/containers.md>), [cryptography](<https://devfeed.tech/tags/cryptography.md>), [financial](<https://devfeed.tech/tags/financial.md>), [pci-dss](<https://devfeed.tech/tags/pci-dss.md>), [pci-dss-v4-0](<https://devfeed.tech/tags/pci-dss-v4-0.md>), [sboms](<https://devfeed.tech/tags/sboms.md>), [software-bill-of-materials](<https://devfeed.tech/tags/software-bill-of-materials.md>), [software-composition-analysis](<https://devfeed.tech/tags/software-composition-analysis.md>), [software-supply-chain](<https://devfeed.tech/tags/software-supply-chain.md>), [stig](<https://devfeed.tech/tags/stig.md>), [vulnerability](<https://devfeed.tech/tags/vulnerability.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>)

### AI overview

The article explains how Chainguard Images can support selected PCI DSS v4.0 container-security controls. It focuses on asset and vulnerability management, hardened images, FIPS cryptography, build-time SBOMs, software supply chain inventory, and continuously updated containers.

### Source excerpt

Chainguard Images are designed to make container image compliance for PCI DSS v4.0 easy for any company involved in card transactions.

## Achieve CMMC 2.0 compliance with Chainguard FIPS Images

DevFeed: [Achieve CMMC 2.0 compliance with Chainguard FIPS Images](<https://devfeed.tech/articles/achieve-cmmc-2-0-compliance-with-chainguard-fips-images-12862.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/achieve-cmmc-2-0-compliance-with-chainguard-fips-images>)

Published: 2024-08-13T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [chainguard fips images](<https://devfeed.tech/topics/chainguard-fips-images.md>), [Cybersecurity](<https://devfeed.tech/topics/cybersecurity.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [Security](<https://devfeed.tech/topics/security.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-fips](<https://devfeed.tech/tags/chainguard-fips.md>), [chainguard-fips-images](<https://devfeed.tech/tags/chainguard-fips-images.md>), [cmmc](<https://devfeed.tech/tags/cmmc.md>), [cmmc-2-0](<https://devfeed.tech/tags/cmmc-2-0.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [fips](<https://devfeed.tech/tags/fips.md>), [government](<https://devfeed.tech/tags/government.md>), [nist](<https://devfeed.tech/tags/nist.md>), [requirements](<https://devfeed.tech/tags/requirements.md>), [standards](<https://devfeed.tech/tags/standards.md>), [stig](<https://devfeed.tech/tags/stig.md>)

### AI overview

This article explains how Chainguard FIPS-enabled, STIG-hardened container images may help organizations address CMMC 2.0 requirements. It outlines the framework's three assessment levels, including Level 2 requirements tied to NIST SP 800-171, and discusses compliance risks for organizations seeking U.S. government contracts.

### Source excerpt

Master CMMC 2.0 compliance! Get expert insights, downloadable resources, and guidance to safeguard your sensitive data.

## Chainguard's STIG-Hardened FIPS Images now generally available

DevFeed: [Chainguard's STIG-Hardened FIPS Images now generally available](<https://devfeed.tech/articles/chainguard-s-stig-hardened-fips-images-now-generally-available-12996.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/chainguards-stig-hardened-fips-images-now-generally-available>)

Published: 2024-07-11T00:00:00Z

Content type: release

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [chainguard](<https://devfeed.tech/topics/chainguard.md>), [container-security](<https://devfeed.tech/topics/container-security.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [Security](<https://devfeed.tech/topics/security.md>), [Operating system](<https://devfeed.tech/topics/operating-system.md>), [Docker Hardened Images](<https://devfeed.tech/topics/docker-hardened-images.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [container-security](<https://devfeed.tech/tags/container-security.md>), [fips](<https://devfeed.tech/tags/fips.md>), [hardening](<https://devfeed.tech/tags/hardening.md>), [html](<https://devfeed.tech/tags/html.md>), [report](<https://devfeed.tech/tags/report.md>), [security](<https://devfeed.tech/tags/security.md>), [security-technical-implementation-guide](<https://devfeed.tech/tags/security-technical-implementation-guide.md>), [stig](<https://devfeed.tech/tags/stig.md>), [stigs](<https://devfeed.tech/tags/stigs.md>)

### AI overview

Chainguard announced the general availability of STIG-hardened FIPS Images. The release maps applicable GPOS SRG controls to containers and provides the STIG in XCCDF format for validation with SCAP tools, supporting FedRAMP compliance workflows.

### Source excerpt

Enhance your container security with Chainguard's STIG-hardened FIPS images, now generally available, offering unparalleled compliance and protection.

## STIG hardening container images

DevFeed: [STIG hardening container images](<https://devfeed.tech/articles/stig-hardening-container-images-13239.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/stig-hardening-container-images>)

Published: 2024-06-07T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [container-security](<https://devfeed.tech/topics/container-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [Containers](<https://devfeed.tech/topics/containers.md>), [chainguard](<https://devfeed.tech/topics/chainguard.md>)

Tags: [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [compliance](<https://devfeed.tech/tags/compliance.md>), [container-security](<https://devfeed.tech/tags/container-security.md>), [containers](<https://devfeed.tech/tags/containers.md>), [false-positives](<https://devfeed.tech/tags/false-positives.md>), [fedramp](<https://devfeed.tech/tags/fedramp.md>), [hardened-image](<https://devfeed.tech/tags/hardened-image.md>), [hardening](<https://devfeed.tech/tags/hardening.md>), [pci-dss](<https://devfeed.tech/tags/pci-dss.md>), [security](<https://devfeed.tech/tags/security.md>), [security-technical-implementation-guide](<https://devfeed.tech/tags/security-technical-implementation-guide.md>), [stig](<https://devfeed.tech/tags/stig.md>), [stig-hardening](<https://devfeed.tech/tags/stig-hardening.md>)

### AI overview

The article discusses hardening container images against STIG requirements, including how to distinguish controls that apply to containers from those that apply to the host operating system or Docker service. It also notes that false positives can occur in container security scans.

### Source excerpt

Dive into the world of STIG hardening for container images. Explore expert insights, practical tips, and Chainguard solutions to fortify your container security.