STIGQter: STIG Summary: Microsoft Windows PAW Security Technical Implementation Guide Version: 3 Release: 3 Benchmark Date: 01 Apr 2026:

The Windows PAW must be configured with a vendor-supported version of Windows 11 and applicable security patches that are DOD approved.

DISA Rule

SV-243447r991589_rule

Vulnerability Number

V-243447

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

WPAW-00-000700

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Install one of the current vendor-supported versions of Windows 11 on site PAWs, including the most recently released patches.

Note: There is no central list in the DOD of "approved" operating system versions. The Microsoft website will list supported versions of Windows 11 and patches. If a STIG is available for one or more of the vendor-supported versions of Windows 11, the version can be considered to be DOD approved. Local AOs usually have implemented a procedure for testing Windows updates before they are deployed. Check with the local AO's staff to determine the latest approved version of Windows 11.

Check Contents

Determine the current approved versions of Windows 11.

Talk to the authorizing official (AO) staff, information system security manager (ISSM), or PAW system administrator to determine the approved versions of Windows 11.

Review the configuration of the PAW and determine which version of Windows is installed on the PAW.

Verify the installed Windows 11 version is an approved version.

If the installed Windows 11 version on the PAW is not the same as an approved version, this is a finding.

Vulnerability Number

V-243447

Documentable

False

Rule Version

WPAW-00-000700

Severity Override Guidance

Check Content Reference

Target Key

5405