I have been tasked to figure out whether implementing STIGs should be something we do internally or whether we outsource the work. I have gone through and understand using the STIG viewer and using the SCAP tool but I want opinions on how long it would take someone(me) with no prior stig experience to implement them in a predominately Microsoft environment. All devices are enrolled and managed by Intune btw.
[link] [comments]