[Verse 1]
When you open up a STIG to see what's inside
Nine components waiting there to be your guide
Group Title starts us off with categorization
Rule Title gives the clear and full explanation
[Chorus]
STIG ID, Vuln ID, numbers you can trust
Severity tells you CAT one, two, or three's a must
Discussion shows the why, Check tells you how
Fix Text makes it right, CCI maps it now
Reference points the way, structure's clear somehow
Nine parts working together, STIG knowledge now
[Verse 2]
STIG ID and Vuln ID are the unique keys
Help you track each finding with the greatest ease
Severity levels guide you where to start your work
CAT One's critical, can't let security lurk
[Chorus]
STIG ID, Vuln ID, numbers you can trust
Severity tells you CAT one, two, or three's a must
Discussion shows the why, Check tells you how
Fix Text makes it right, CCI maps it now
Reference points the way, structure's clear somehow
Nine parts working together, STIG knowledge now
[Verse 3]
Discussion gives you context, rationale so clear
Check Content shows the steps to verify what's here
Fix Text remediation makes the problem go
CCI links to NIST controls that you should know
[Bridge]
Group and Rule and IDs
Severity's your priority
Discussion, Check, and Fix
CCI and Reference in the mix
[Chorus]
STIG ID, Vuln ID, numbers you can trust
Severity tells you CAT one, two, or three's a must
Discussion shows the why, Check tells you how
Fix Text makes it right, CCI maps it now
Reference points the way, structure's clear somehow
Nine parts working together, STIG knowledge now
[Outro]
Nine components strong and true
STIG structure guiding you
From Group Title to Reference line
Security knowledge by design