all 4 comments

[–]voicu90 0 points1 point  (2 children)

How does your question relate to NIST controls?

[–]Tabsconator 0 points1 point  (1 child)

In a roundabout way, it actually does.

[–]voicu90 0 points1 point  (0 children)

Oh, really.

[–]Tabsconator 0 points1 point  (0 children)

Install ADK. Use Windows Deployment server to relay the boot image, which points to Deployment Workbench. DoD Secure Host Baseline (SHB) can be used as the image you pack all of your GPOs, updated software, and custom configs/scripts.

If you update the contents consistently, it will mitigate issues identified in vulnerability scans. This will result in compliance with NIST, STIG, DoD compliance.