Defense Information Systems Agency (DISA) has released the Esri ArcGIS Server 10.3 STIG Version 1. The requirements of this STIG become effective immediately. The Security Technical Implementation Guide (STIG) is available on IASE at:
http://iase.disa.mil/stigs/