Security Content Automation Protocol: Difference between revisions

Revision as of 16:26, 14 September 2011

Revision as of 16:30, 14 September 2011

Line 40:

A customer who is subject to the [[Federal Information Security Management Act of 2002|FISMA]] requirements, or wants to use security products that have been tested and validated to the SCAP standard by an [http://nvd.nist.gov/scapproducts.cfm#scap_labs independent third party laboratory] should visit the [http://nvd.nist.gov/scapproducts.cfm SCAP validated products web page] to verify the status of the product(s) being considered.

There is also the [http://open-scap.org/page/Main_Page Open-SCAP project]: The OpenSCAP Project was created to provide an open-source framework to the community which enables integration with the Security Content Automation Protocol (SCAP) suite of standards and capabilities. It is the goal of OpenSCAP to provide a simple, easy to use set of interfaces to serve as the framework for community use of SCAP.

==External links==

Line 47 ⟶ 45:

*[http://nvd.nist.gov National Vulnerability Database web site]

*[http://makingsecuritymeasurable.mitre.org/index.html Mitre "Making Security Measurable" web site]

*[http://open-scap.org/page/Main_Page Open-SCAP project]

[[Category:Computer security]]