Re: DISA STIG for Mongo DB (Fed Gov Environment)

[Drew Shuller]

If that's the only product that can be used, you may be able to get a
waiver.



On Jan 27, 2017 12:52 PM, "Rackley, James A CIV" 
wrote:

> **
>
> Listers,
>
>
>
> Greetings, all!
>
>
>
> As a warning, if you don't know what the acronyms DISA and STIG are, this
> discussion will likely give you a headache.  If you do know what they mean,
> you've likely had a headache for a very long time.   :D
>
>
>
> We're looking at an 8.1 to 9.1 upgrade of our environment and would like
> to use Smart/My IT. However, these apps require the installation of the
> Mongo DB product which has no DISA approved STIG.
>
>
>
> Because we have no control over DISA's timeline, we've now decided not to
> deploy Smart/My IT until we can get an approved STIG.  We are proceeding
> with what I've termed "Vanilla 9.1".
>
>
>
> Is anyone else out there in the Fed Gov space working on a Mongo DB STIG
> with DISA?  If so, I'd love to chat with you. Perhaps we can combine
> efforts/resources and get this thing moving.  Just as importantly, I don't
> want to waste resources if someone else is well into the process.
>
>
>
> Thanks in advance!
>
>
>
> Regards,
>
> Jim Rackley
> CGFIXIT (Remedy) Service Manager, ITILv3©
> USCG, C4ITSC, Business Operations Division
>
> Phone: (757) 628-4039
> Cell: (757) 609-0909
> "You can't help everyone. But everyone can help someone."
> _ARSlist: "Where the Answers Are" and have been for 20 years_

___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
"Where the Answers Are, and have been for 20 years"

Re: DISA STIG for Mongo DB (Fed Gov Environment)

[JD Hood]

"Information Assurance -- We're working *darned* hard to make sure you
can't!!"

I do not personally know of a CON, STIG or anything for that DB product.

Good luck!
-JDHood


On Fri, Jan 27, 2017 at 1:51 PM, Rackley, James A CIV <
james.a.rack...@uscg.mil> wrote:

> **
>
> Listers,
>
>
>
> Greetings, all!
>
>
>
> As a warning, if you don't know what the acronyms DISA and STIG are, this
> discussion will likely give you a headache.  If you do know what they mean,
> you've likely had a headache for a very long time.   :D
>
>
>
> We're looking at an 8.1 to 9.1 upgrade of our environment and would like
> to use Smart/My IT. However, these apps require the installation of the
> Mongo DB product which has no DISA approved STIG.
>
>
>
> Because we have no control over DISA's timeline, we've now decided not to
> deploy Smart/My IT until we can get an approved STIG.  We are proceeding
> with what I've termed "Vanilla 9.1".
>
>
>
> Is anyone else out there in the Fed Gov space working on a Mongo DB STIG
> with DISA?  If so, I'd love to chat with you. Perhaps we can combine
> efforts/resources and get this thing moving.  Just as importantly, I don't
> want to waste resources if someone else is well into the process.
>
>
>
> Thanks in advance!
>
>
>
> Regards,
>
> Jim Rackley
> CGFIXIT (Remedy) Service Manager, ITILv3©
> USCG, C4ITSC, Business Operations Division
>
> Phone: (757) 628-4039
> Cell: (757) 609-0909
> "You can't help everyone. But everyone can help someone."
> _ARSlist: "Where the Answers Are" and have been for 20 years_

___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
"Where the Answers Are, and have been for 20 years"

DISA STIG for Mongo DB (Fed Gov Environment)

[Rackley, James A CIV]

Listers,



Greetings, all!



As a warning, if you don't know what the acronyms DISA and STIG are, this 
discussion will likely give you a headache.  If you do know what they mean, 
you've likely had a headache for a very long time.   :D



We're looking at an 8.1 to 9.1 upgrade of our environment and would like to use 
Smart/My IT. However, these apps require the installation of the Mongo DB 
product which has no DISA approved STIG.



Because we have no control over DISA's timeline, we've now decided not to 
deploy Smart/My IT until we can get an approved STIG.  We are proceeding with 
what I've termed "Vanilla 9.1".



Is anyone else out there in the Fed Gov space working on a Mongo DB STIG with 
DISA?  If so, I'd love to chat with you. Perhaps we can combine 
efforts/resources and get this thing moving.  Just as importantly, I don't want 
to waste resources if someone else is well into the process.



Thanks in advance!



Regards,

Jim Rackley
CGFIXIT (Remedy) Service Manager, ITILv3©
USCG, C4ITSC, Business Operations Division

Phone: (757) 628-4039
Cell: (757) 609-0909
"You can't help everyone. But everyone can help someone."

___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
"Where the Answers Are, and have been for 20 years"