U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.


Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

NISTIR 7511 Rev. 4

Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements

Date Published: January 2016

Supersedes: NISTIR 7511 Rev. 3 (07/11/2013)


Melanie Cook (NIST), Stephen Quinn (NIST), David Waltermire (NIST), Dragos Prisaca (G2)



Security Content Automation Protocol (SCAP); SCAP derived test requirements (DTR); SCAP validated tools; SCAP validated products; SCAP validated modules; SCAP validation
Control Families

Assessment, Authorization and Monitoring; System and Services Acquisition


NISTIR 7511 Rev. 4 (DOI)
Local Download

Supplemental Material:
SCAP Validation Program (other)

Related NIST Publications:
SP 800-126 Rev. 2

Document History:
01/28/16: NISTIR 7511 Rev. 4 (Final)


Security and Privacy
acquisition; security automation

Laws and Regulations
OMB Circular A-130