Glossary: Vulnerability, Asset and Change Management

SCAP (Security Content Automation Protocol)

Also written: SCAP

NIST's set of standard formats that turn a benchmark into files any SCAP scanner can run. It includes XCCDF, OVAL, CPE, CVE, CVSS and CCE.

Where the book teaches it

Chapter 7: Benchmarks and SCAP

Related terms

XCCDF (Extensible Configuration Checklist Description Format)OVAL (Open Vulnerability and Assessment Language)CPE (Common Platform Enumeration)OpenSCAP Benchmark