Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Security Content Automation Protocol SCAP

SCAP 1.2 Schematron Rules

The following sections detail the Schematron rules for SCAP 1.2.

SCAP Schematron Rules

The SCAP Schematron Rules are ISO Schematron rules written to check many of the requirements documented in NIST SP 800-126 Rev 2. They are for informational purposes only; they do not supercede the requirements in the specification. The rules are subject to change at anytime. Instructions on how to use the resource are provided in the included readme.txt.

Version: 1.2.6

Released: 12/16/2016

Download: SCAP Schematron Package

SHA-1: BBFD29657FB9B9F3EB48A3D021817FBB1DB8E21D

SHA-256: 59DD4D119E46257DE7D519B265462ED0E0C2F7599400DF4AC8BA5D41A0CD683C

OVAL Schematron Rules

The OVAL Schematron Rules page contains the OVAL Schematron files that are applicable to SCAP 1.2. These are provided because in limited cases the Schematron files needed to be modified from their official version (found here). All deviations from the officially released versions are documented in the readme.txt.

Version: N/A

Status: N/A

Updated: 12/16/2016

Download: OVAL Schematron Package

SHA-256: A2E0639536CFC5FDEA725D3B0D3BD7428878F09C04992905E9BBC98CD7803A46

Created December 07, 2016, Updated April 20, 2023