Server Configuration Monitor

Hi.  Currently no plans to update the STIGs or add new ones, but we did add the ability for you to build and modify your own in the GUI.  You should be able to copy the current ones and modify them for your compliance needs.   Alternatively, you could contract with the a third party to build these for you. 

That's such a shame. SCM has the potential to be a really powerful tool but hasn't had any appreciable update since 2016.

Are there any plans to introduce a way to import the XML STIGs that NIST provide? This would alleviate the requirement on SolarWinds to provide updates for templates and provide a much easier and simpler way for your end users to secure their environments.

Jeez! We pay a lot for annual SCM licensing only to be told, do it yourself.

I have created a feature request for this. Please support.

thwack.solarwinds.com/.../allow-for-server-configuration-monitor-in-hco-to-import-from-nist-instead-of-having-to-create-custom-yaml-ones

Definitely gave that the +1

SCM as it is right now I think focuses more on baselining, but having more love for the compliance would be incredible!