Skip to content

Glossary: Monitoring Tools and the Identity Life Cycle

SCAP (Security Content Automation Protocol)

Also written: SCAP, SCAP 1.4

NIST's suite of standards (XCCDF, OVAL, CVE, CPE, CCE, CVSS) that lets any validated scanner check systems against published checklists and report results in a standard format. It answers "how is it set up?".

Where the book teaches it

Related terms

XCCDF (Extensible Configuration Checklist Description Format)OVAL (Open Vulnerability and Assessment Language)BenchmarkConfiguration complianceOpenSCAP