STIGhubSTIGhub
STIGsRMF ControlsCompare
STIGhub— A free STIG search and compliance tool·STIGs updated 3 days ago
Powered by Pylon·Privacy·Terms·© 2026 Beacon Cloud Solutions, Inc.
← SA-10 (1) — Developer Configuration Management

CCI-000698

Definition

Require the developer of the system, system component, or system service to enable integrity verification of software and firmware components.

Parent Control

SA-10 (1)Developer Configuration ManagementSystem and Services Acquisition

Linked STIG Checks (2)

V-222645CAT IIApplication files must be cryptographically hashed prior to deploying to DoD operational networks.Application Security and Development Security Technical Implementation GuideV-22506CAT IIThe system package management tool must be used to verify system software periodically.SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide