[Verse 1]
System administrators wake up every morning
Hardening servers with STIG configurations
Running SCAP scans to check their compliance warnings
Making sure systems meet security specifications
[Verse 2]
Security engineers selecting what applies
Managing exceptions when standards can't be met
Interpreting results with their trained expert eyes
Choosing the right STIGs without any regret
[Chorus]
Who cares about STIGs, who needs them today
System admins, security teams show the way
ISSM and ISSO keeping watch from above
Vendors and auditors, STIGs are what they love
Who cares about STIGs, everyone plays their part
Making systems secure right from the start
[Verse 3]
Information System Security Managers lead
Overseeing compliance across every machine
ISSO partners help fulfill the need
Managing checklist evidence kept clean
[Verse 4]
Vendors and developers work with DISA's crew
Building STIGs for products they create
Ensuring their software can meet standards too
Requirements their systems can accommodate
[Chorus]
Who cares about STIGs, who needs them today
System admins, security teams show the way
ISSM and ISSO keeping watch from above
Vendors and auditors, STIGs are what they love
Who cares about STIGs, everyone plays their part
Making systems secure right from the start
[Bridge]
Auditors inspect the checklist results
Reviewing SCAP findings line by line
Each role has purpose, no one insults
Working together by security design
[Chorus]
Who cares about STIGs, who needs them today
System admins, security teams show the way
ISSM and ISSO keeping watch from above
Vendors and auditors, STIGs are what they love
Who cares about STIGs, everyone plays their part
Making systems secure right from the start
[Outro]
Five key players in the STIG game
Each one essential, each one the same
Security's strength comes from their combined frame
Who cares about STIGs, everyone knows the name