Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

NIST Released 2 Draft Special Publications on the Security Content Automation Protocol (SCAP) -- DRAFT Special Publication 800-126 & DRAFT Special Publication 800-126A
July 18, 2016

NIST invites comments on two draft publications on the Security Content Automation Protocol (SCAP). The first is Draft Special Publication 800-126 Revision 3The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3. The second is Draft SP 800-126ASCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3. (Links to the 2 Draft Publications and to the comment template form can be found below).
 
SP 800-126 Revision 3 and SP 800-126A collectively define the proposed technical specification for SCAP version 1.3, which is based on enhancements and clarifications to the SCAP 1.2 specification. SP 800-126A is a new publication that allows SCAP 1.3 to take advantage of selected minor version updates of SCAP component specifications, as well as designated Open Vulnerability and Assessment Language (OVAL) platform schema versions. 
 
Email comments on both publications to 800-126comments@nist.gov (Subject: "Comments Draft SP 800-126). 
 
Comments are due by August 19, 2016

Created December 21, 2016, Updated May 15, 2017