# DISA STIG Tests

DISA Security Technical Implementation Guide (STIG) rules for Microsoft Entra ID and Intune implemented as Maester tests.

Source: https://maester.dev/docs/tests/disa

These tests verify Microsoft 365 tenant configuration against the [Security Technical Implementation Guides (STIGs)](https://public.cyber.mil/stigs/) that the US Defense Information Systems Agency (DISA) publishes for Microsoft Entra ID, the Intune MDM service (desktop and mobile) and the Intune service (desktop). Each test is named after the STIG rule it checks: DISA.V-270233 checks rule V-270233. Where another suite already checks the same setting, the DISA test runs that test with DISA's values. Rules that need a person to confirm a process, such as alerting the ISSO when accounts change, have no test. Some rules are DoD-specific, such as the DoD Notice and Consent Banner, and fail outside DoD by design.

<CatalogList scope="suite" value="DISA" />