STIGs help you configure your systems for security and compliance to what sort of overall government requirement
What contains the specific configuration, file permission, and access control tests to be performed
Imported from external platform