Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Security Content Automation Protocol SCAP

SCAP 1.4 Schematron Rules

The following sections detail the Schematron rules for SCAP 1.4.

SCAP Schematron Rules

The SCAP Schematron Rules are ISO Schematron rules written to check many of the requirements documented in NIST SP 800-126 Rev 4. They are for informational purposes only; they do not supercede the requirements in the specification. The rules are subject to change at anytime. Instructions on how to use the resource are provided in the included scap-rules-readme.txt.

Version: 1.4.0

Released: 12/11/2025

Download: SCAP 1.4 Schematron File

Created December 07, 2016, Updated December 22, 2025