...
DoD acquisition programs are specifying the Application Security and Development Security Technical Implementation Guide (STIG) in requests for proposal (RFPs). Below is information for the last two versions of the Application and Development Security STIG, Version 4, Release 1 [DISA 2016] and 1 and Version 3, Release 10 [DISA 2015].
Application and Development Security STIG, Version 4, Release 1 [DISA 2016]
...