Re: [Non-DoD Source] Re: STIG Rule Id vs Version
On 10/10/2017 11:24 AM, Gabe Alford wrote:
I have yet to see accreditors ask for SV- rule tags. I guess it
happens in some circles, but the RHEL identifiers were the ones that I
have always seen referenced. Of course when RMF came into the picture,
it was all about NIST mappings and very little about STIG identifiers.
eMASS uses SV tags for mapping. It's the only way to link an issue in
an (eMASS) POA&M directly back to the STIG rule.
--
Paul Arnold, CISSP
Cole Engineering Services, Inc.
Attachments:
- attachment.html (text/html — 1.1 KB)
- smime.p7s (application/pkcs7-signature — 4.5 KB)