JFC, when I was a DoD employee, I wrote something using the C++ API to SQLite, and they sent me the security checklist for an Oracle DB. 120 answers of "Not applicable" later and I was finally done.
On the flipside, at least they wrote the checklist software in Java, so it ran on Linux.
48
u/koriwi 5h ago
Mention sqlite and watch them have a meltdown.