NIST to release SCAP FDCC scanner list
On Feb. 1 the National Institute of Standards and Technology will
release a list of validated scanners that check for Federal Desktop Core
Configuration compliance.

The Information Security Automation Program and
The Security Content Automation Protocol
http://nvd.nist.gov/scap.cfm

U.S. Government Agency Leads: NIST, OSD, DHS, NSA, and DISA

The Information Security Automation Program (ISAP) is a U.S. government multi-agency
initiative to enable automation and standardization of technical security operations.
The Security Content Automation Protocol (SCAP) is a method for using specific standards
to enable automated vulnerability management, measurement, and policy compliance
evaluation (e.g., FISMA compliance). NVD is the U.S. government content repository for ISAP and SCAP.

SCAP Validation Program

• SCAP Validation Program Home page
• List of SCAP Validated Products
• List of SCAP Accredited Laboratories
• SCAP Validation Derived Test Requirements

SCAP Documents

• Information Security Automation Program Overview (v1 beta)
• Security Content Automation Protocol (v1 beta)
• ISAP/SCAP Common Acronyms
• ISAP/SCAP Glossary

SCAP Content

• SCAP Checklists (files to automate low level security checking)
• SCAP Enumeration and Mapping Data Feeds (for tool developers and integrators)

SCAP Standards:  CVE, CCE, CPE, CVSS, XCCDF, OVAL