Security Content Automation Program (SCAP): Automating Compliance Checking, Vulnerability Management, and Security Measurement. (Draft)

摘要

This publication provides an overview of the Security Content Automation Program, and then focuses on explaining how XCCDF and OVAL files can be used as part of security content automation. The publication also examines how security content automation can be beneficial in achieving compliance with the Federal Information Security Management Act (FISMA), and how some of the same checklist components used to support FISMA compliance efforts can also be used for other compliance needs, such as Department of Defense (DOD) 8500.2/8510 compliance.