Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

ITL Bulletin

Advancing Security Automation and Standardization: Revised Technical Specifications Issued for the Security Content Automation Protocol (SCAP)

Date Published: January 2012


Shirley Radack (NIST)



configuration management; cyber security; information security; information systems; information technology (IT); National Vulnerability Database; NIST Special Publications; risk management; Risk Management Framework; Security Content Automation Protocol; security checklists; security controls; software flaws; security management; threats; voluntary consensus standards; vulnerabilities
Control Families

None selected


Download (pdf)

Supplemental Material:
None available

Document History:
01/24/12: ITL Bulletin (Final)


Security and Privacy

security automation