[Verse 1]
In the world of DoD security there's a framework we must know
STIGs don't stand alone they're part of a greater flow
DoD Instruction eight five hundred oh one sets the foundation stone
Cybersecurity policy that makes our systems strong
[Chorus]
Eight five hundred oh one starts the game
Eight five ten oh one brings RMF to fame
CNSSI twelve fifty three categorizes with care
NIST eight hundred fifty three controls are everywhere
Eight hundred thirty seven guides us through each phase
The STIG ecosystem working through our days
[Verse 2]
Risk Management Framework comes from eight five ten oh one
Assessment and authorization before our work is done
National security systems need CNSSI guidance clear
Twelve fifty three shows us which controls we should revere
[Chorus]
Eight five hundred oh one starts the game
Eight five ten oh one brings RMF to fame
CNSSI twelve fifty three categorizes with care
NIST eight hundred fifty three controls are everywhere
Eight hundred thirty seven guides us through each phase
The STIG ecosystem working through our days
[Bridge]
NIST Special Publication eight hundred fifty three
Provides the catalog of controls for you and me
While eight hundred thirty seven shows the RMF way
STIGs implement these standards every single day
[Verse 3]
From policy to practice STIGs bridge the gap
Technical implementation following the map
Governance structure flowing from the top on down
STIGs are the foundation keeping systems sound
[Chorus]
Eight five hundred oh one starts the game
Eight five ten oh one brings RMF to fame
CNSSI twelve fifty three categorizes with care
NIST eight hundred fifty three controls are everywhere
Eight hundred thirty seven guides us through each phase
The STIG ecosystem working through our days
[Outro]
Five key pieces in our cybersecurity dance
DoD and NIST together giving systems their chance
STIGs within the ecosystem playing their part
Security governance flowing like a work of art