Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

SP 800-126A (DRAFT)

SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3

Date Published: July 2016
Comments Due: August 19, 2016 (public comment period is CLOSED)
Email Questions to: 800-126comments@nist.gov

Withdrawn: February 14, 2018

Author(s)

Harold Booth (NIST), David Waltermire (NIST), Mark Badger (NIST), Melanie Cook (NIST), Stephen Quinn (NIST), Karen Scarfone (Scarfone Cybersecurity)

Announcement

NIST invites comments on two draft publications on the Security Content Automation Protocol (SCAP). The first is Special Publication (SP) 800-126 Revision 3, The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3. The second is SP 800-126A, SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3.

SP 800-126 Revision 3 and SP 800-126A collectively define the proposed technical specification for SCAP version 1.3, which is based on enhancements and clarifications to the SCAP 1.2 specification. SP 800-126A is a new publication that allows SCAP 1.3 to take advantage of selected minor version updates of SCAP component specifications, as well as designated Open Vulnerability and Assessment Language (OVAL) platform schema versions.

Abstract

Keywords

security 113 configuration; Security Content Automation Protocol (SCAP); security automation; Open Vulnerability and Assessment Language (OVAL)
Control Families

Audit and Accountability; Security Assessment and Authorization; Incident Response; Maintenance; Risk Assessment;