STIG Tools Mapping
The tables below show the severity and triage status mappings for all of the STIG tools that are supported by Software Risk Manager.
Tools are listed alphabetically. Tool results are mapped to the Software Risk Manager status shown at the top of each column. (A blank cell indicates that an equivalent status value is unavailable or undefined.)
Severity Mapping
| STIG Tool | Critical | High | Medium | Low | Info | Unspecified |
|---|---|---|---|---|---|---|
| STIG | CAT I (high) | CAT II (medium) | CAT III (low) |
Triage Status Mapping
| STIG Tool | Ignored | False Positive | To Be Fixed | Mitigated | Fixed | Reopened | None |
|---|---|---|---|---|---|---|---|
| STIG | Not A Finding, Not Applicable | Open | Not Reviewed |
For SRM Triage Status definitions, click here.