With the recent DISA publication of the draft STIG, the timing seems right to host a STIG workshop. NSA IAD and Red Hat will be hosting a public STIG and SCAP workshop on _Tuesday 26-MAR-2013_. Additionally, DISA FSO will be in attendance to hear feedback from the community. You can register here:
https://engage.redhat.com/forms/stig-workshop
In the March 26th workshop we will:
* Share knowledge on the installation of SCAP Security Guide (SSG). How to run a scan, how to customize settings, how to get a report that you can show your ISSE/ISSM, and hw to generate a certification test plan based on your customized rules.
* Go a bit deeper, and understand how the code works. Answering questions like: "What is XCCDF, OVAL, and OCIL?" "How can you add your own custome rules?"
* Prep your environment to submit patches back to SSG, including learning how to setup git and how to create a Fedora Hosted account.
* Chat about what additional profiles are needed. How should we handle CNSSI 12-53? What about PCI compliance?
We'll go through Red Hat Enterprise Linux 6 SCAP content, including the STIG, performing scans, and generating C&A artifacts. Attendees can take this setup home and use it to start providing feedback against the RHEL6 STIG.
Sign up for the workshop! Date: Tuesday March 26, 2013, with three 2-hour workshop intervals to choose from. Limited availability per session!
MORNING SESSION: Red Hat Office, 8260 Greensboro Drive, Suite 300, McLean, VA Morning 0800-1000
AFTERNOON SESSIONS: NSA unclassified facility in the BWI area. Address will be sent to registered attendees. Afternoon: 1200 - 1400 Afternoon: 1430 - 1630
Registration at: https://engage.redhat.com/forms/stig-workshop
scap-security-guide@lists.fedorahosted.org
-
Shawn Wells