Glossary: Monitoring Tools and the Identity Life Cycle
SCAP (Security Content Automation Protocol)
Also written: SCAP, SCAP 1.4
NIST's suite of standards (XCCDF, OVAL, CVE, CPE, CCE, CVSS) that lets any validated scanner check systems against published checklists and report results in a standard format. It answers "how is it set up?".
Where the book teaches it
Related terms
XCCDF (Extensible Configuration Checklist Description Format)OVAL (Open Vulnerability and Assessment Language)BenchmarkConfiguration complianceOpenSCAP