STIGS are standards for which domain?

• A. DoD information assurance.
• B. ISO standards.
• C. PCI DSS.
• D. HIPAA.

Answer: (A)

STIGs are the DoD's own set of security baselines used to secure information systems, providing detailed, prescriptive requirements that support information assurance within the Department of Defense. They’re published by DISA and are applied to DoD networks and platforms to ensure configurations meet DoD security posture. They’re DoD-specific, not international ISO standards, and they’re not the frameworks used for payment card data (PCI DSS) or health information privacy and security (HIPAA). In short, STIGs are standards for the DoD information assurance domain.