Security Content Automation Protocol: Difference between revisions

Revision as of 18:51, 23 March 2021

Revision as of 01:45, 24 September 2022

Line 1:

{{Short description|Set of security information exchange specifications}}

The '''Security Content Automation Protocol''' ('''SCAP''') is a method for using specific standards to enable automated vulnerability management, measurement, and policy compliance evaluation of systems deployed in an organization, including e.g., [[FISMA|FISMA (Federal Information Security Management Act, 2002)]] compliance. The [[National Vulnerability Database]] (NVD) is the U.S. government content repository for SCAP. An example of an implementation of SCAP is OpenSCAP.