Security Technical Implementation Guide
Detailed hardening checklists published by the Defense Information Systems Agency for configuring operating systems, applications, and network devices securely. US Department of Defense systems must comply with applicable STIGs, and many other organizations adopt them as strict baselines. Each STIG item includes a severity rating and specific check and fix procedures.