Establish the hardened baseline
We identify the applicable STIGs and SRGs, review current configuration, document approved exceptions, and agree on the target state with engineering.
Services Technical hardening
Infrastructure Hardening
We apply and document STIG and SRG settings, resolve scan findings, and maintain the hardened configuration as the system changes.
Discuss this scope When to call us
Start with the problem already in front of the program.
Bring us in when STIG findings are accumulating, configuration settings differ between environments, scan results lack clear owners, or hardening evidence is missing from the package.
Typical deliverables
- Applicable STIG and SRG baseline
- Configuration and scan results
- Remediation records
- Exceptions and risk decisions
- Repeatable hardening procedures
Work we take on
What the engagement covers.
Apply and verify settings
We implement or guide configuration changes, rerun scans, investigate failures, and preserve the evidence needed for the control record.
Keep hardening repeatable
We document procedures and support automation where it reduces drift, while keeping change control and authorization records current.
Standards and systems
The work stays inside the program’s requirements.
- DISA STIGs
- DISA SRGs
- NIST SP 800-53
- SCAP scanning
- Configuration management
Discuss the work
Bring us the current package and the next deadline.
We will review where the work stands, identify the first issue to resolve, and define the scope with the people responsible for delivery.
Talk with an RMF lead