[Verse 1]
When security standards need to be clear
DISA creates guides that we hold dear
STIGs for systems both old and new
Three major categories coming through
Operating systems need protection strong
Windows and Linux where configs belong
Red Hat and Ubuntu, SUSE in line
Oracle Linux and macOS design
[Chorus]
OS, Network, Apps - remember these three
Operating systems running free
Network devices keeping us secure
Application STIGs making code pure
OS, Network, Apps - the major domains
Security guidance flowing through our veins
[Verse 2]
Network infrastructure needs rules to follow
Cisco and Juniper, no room for hollow
Palo Alto firewalls and F5 load balancing
Aruba wireless networks, security enhancing
Routers and switches with IOS commands
NX-OS configurations across all the lands
[Chorus]
OS, Network, Apps - remember these three
Operating systems running free
Network devices keeping us secure
Application STIGs making code pure
OS, Network, Apps - the major domains
Security guidance flowing through our veins
[Verse 3]
Applications running need standards too
Databases storing data me and you
Oracle and SQL Server holding information tight
PostgreSQL and MySQL shining bright
MongoDB and web servers serving pages clean
Apache and IIS, NGINX on the scene
[Bridge]
From VMware virtual to cloud up high
AWS and Azure reaching for the sky
Docker containers and Kubernetes orchestration
Mobile devices across the nation
Email systems and browsers we use each day
Every technology has a STIG to obey
[Chorus]
OS, Network, Apps - remember these three
Operating systems running free
Network devices keeping us secure
Application STIGs making code pure
OS, Network, Apps - the major domains
Security guidance flowing through our veins
[Outro]
Three categories standing strong and true
Operating systems, networks, applications too
DISA STIGs protecting all we do
Security standards seeing us through