How often does IBM update BigFix with the DISA STIG compliance checks? When compared with the checks that DISA issues, the IBM list is not complete, why is that?
There might be some manual checks involved that cannot be developed as fixlets. That is my guess.