DISA

The Defense Information Systems Agency (DISA) is the DoD agency responsible for providing and protecting the department's IT infrastructure. DISA manages the DoD's networks, develops security standards (including STIGs), provides cybersecurity tools (like ACAS), and operates critical enterprise services.

For defense contractors, DISA is the source of many security tools and standards you'll encounter. STIGs (Security Technical Implementation Guides) from DISA define how systems must be configured, and DISA's vulnerability scanning tools are the standard for DoD security assessments.