Glossary: Vulnerability, Asset and Change Management

OVAL (Open Vulnerability and Assessment Language)

Also written: OVAL, kc-oval.xml

The SCAP language for tests, which says exactly how to check one thing on a machine, such as a pattern in /etc/ssh/sshd_config. XCCDF says what to check, and OVAL says how.