> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/public-sector/disa-stig-support/disa-stig.md).

# DISA STIG Support

Security Technical Implementation Guides (STIGs) contain technical guidance on how to lock down systems that might otherwise be vulnerable to attack. This document provides the different options for deploying and operating Prisma Cloud Compute Edition (self-hosted) within environments that adhere to public-sector and Department of Defense guidance.

## DISA STIG: Application Security and Development Findings

Prisma Cloud Compute has been assessed to the [Application Security and Development Security Technical Implementation Guide Version 4, Release: 11 Benchmark Date: 24 Jul 2020](https://public.cyber.mil/stigs/downloads/?_dl_facet_stigs=app-security%2Capp-security-dev).

The findings based upon the vulnerability severity category codes can be found [here](/public-sector/disa-stig-support/stig-asd-v4-r11.md).

## DISA STIG Scan Findings and Justifications for Software Releases

Every release of Prisma Cloud Compute Edition we perform an [SCAP](https://csrc.nist.gov/projects/security-content-automation-protocol/) scan of the Console and Defender images. The scan is performed with [OpenSCAP](https://www.open-scap.org/) using the [Compliance as Code](https://github.com/ComplianceAsCode) benchmark checks:

* Benchmark URL: scap-security-guide-\<latest>/ssg-rhel8-ds.xml
* Benchmark ID: xccdf\_org.ssgproject.content\_benchmark\_RHEL-8
* Profile ID: xccdf\_org.ssgproject.content\_profile\_stig

All Prisma Cloud Compute findings are posted [here.](/public-sector/release-findings/release-findings.md)

## DISA STIG Compliance Template

Release v21\_04\_412 include the Docker Enterprise 2.x Linux/UNIX STIG compliance checks into the [“DISA STIG” compliance template.](https://docs.paloaltonetworks.com/prisma/prisma-cloud/21-04/prisma-cloud-compute-edition-admin/compliance/disa_stig_docker_enterprise.html) When you create a new compliance policy and select the DISA STIG compliance template, you will automatically receive alerts based on the checks aligned with the STIG. The mapping of the STIG\_ID to Prisma Cloud Compute Compliance Check ID can be found [here](/public-sector/disa-stig-support/disa-stig-compliance-template/mapping.md).

## DISA STIG for Prisma Cloud Compute (self-hosted)

The Defense Information Systems Agency has released the Prisma Cloud Compute STIG. This STIG provides guidance for the configuration and operation of Prisma Cloud Compute (self-hosted). It includes technical recommendations for deployment within isolated environments. The Prisma Cloud Compute STIG can be downloaded from the [DoD Cyber Exchange website](https://cyber.mil/stigs/downloads/).


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.prismacloud.io/public-sector/disa-stig-support/disa-stig.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.