Security Content Automation Protocol: Difference between revisions

Revision as of 11:07, 23 October 2023

Revision as of 12:44, 23 October 2023

Line 3:

{{Use American English|date=September 2023}}

{{Use mdy dates|date=September 2023}}

The '''Security Content Automation Protocol''' ('''SCAP''') is a method for using specific standards to enable automated vulnerability management, measurement, and policy compliance evaluation of systems deployed in an organization, including e.g., [[Federal Information Security Management Act of 2002|FISMA (Federal Information Security Management Act, 2002)]] compliance.<ref>{{Cite web|date=2023-10-23|title=Secure Configurations and the Power of SCAP|url=https://scanoncomputer.com/secure-configurations-power-of-scap/|access-date=2020-03-02|website=scanoncomputer.com|language=en-us}}</ref> The [[National Vulnerability Database]] (NVD) is the U.S. government content repository for SCAP. An example of an implementation of SCAP is OpenSCAP.<ref>{{Cite web|date=2023-10-23|title= About OpenSCAP|url=https://www.open-scap.org/|access-date=2020-02-04|website=open-scap.org|language=en-us}}</ref>

==Purpose==