Date Published: January 2018
Comments Due: February 19, 2018 (public comment period is CLOSED)
Email Questions to: firstname.lastname@example.org
Melanie Cook (NIST), Stephen Quinn (NIST), David Waltermire (NIST), Dragos Prisaca (G2)
The NIST Security Content Automation Protocol (SCAP) Validation Program tests the ability of products and modules to use the features and functionality available through SCAP and its components. SCAP 1.3 consists of a suite of specifications for standardizing the format and nomenclature by which security software communicates information about software flaws and security configurations. The standardization of security information facilitates interoperability and enables predictable results among disparate SCAP enabled security software. The SCAP Validation Program provides vendors an opportunity to have independent verification that security software correctly processes SCAP expressed security information and provides standardized output. NISTIR 7511 Revision 5 describes the test requirements for SCAP version 1.3.
Keywords SCAP derived test requirements (DTR); SCAP validated tools; SCAP validated products; SCAP validated modules; Security Content Automation Protocol (SCAP); SCAP validation
Security Assessment and Authorization;
System and Services Acquisition;