Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST IR 7511 Rev. 3

Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements

Date Published: January 2013 (Updated 7/11/2013)

Supersedes: IR 7511 Rev. 3 (01/16/2013)


John Banghart (NIST), Melanie Cook (NIST), Stephen Quinn (NIST), David Waltermire (NIST), Andrew Bove (Secure Acuity)



SCAP validated tools; SCAP validation; SCAP derived test requirements (DTR); Security Content Automation Protocol (SCAP)
Control Families

Assessment, Authorization and Monitoring; System and Services Acquisition


Download URL

Supplemental Material:
None available

Document History:
07/11/13: IR 7511 Rev. 3 (Final)


Security and Privacy

acquisition, security automation

Laws and Regulations

OMB Circular A-130