Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3

Published

Author(s)

Harold Booth, David A. Waltermire, Mark L. Badger, Melanie R. Cook, Stephen Quinn, Karen Scarfone

Abstract

The Security Content Automation Protocol (SCAP) is a multi-purpose framework of component specifications that support automated configuration, vulnerability, and patch checking, security measurement, and technical control compliance activities. The SCAP version 1.3 specification is defined by the combination of NIST Special Publication (SP) 800-126 Revision 3, a set of schemas, and this document. This document allows the use of particular minor version updates to SCAP 1.3 component specifications and the use of particular Open Vulnerability and Assessment Language (OVAL) core schema and platform schema versions. Allowing use of these updates and schemas provides additional functionality for SCAP 1.3 without causing any loss of existing functionality.
Citation
Special Publication (NIST SP) - 800-126A
Report Number
800-126A

Keywords

Open Vulnerability and Assessment Language (OVAL), security automation, security configuration, Security Content Automation Protocol (SCAP)

Citation

Booth, H. , Waltermire, D. , Badger, M. , Cook, M. , Quinn, S. and Scarfone, K. (2018), SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.800-126A (Accessed June 24, 2024)

Issues

If you have any questions about this publication or are having problems accessing it, please contact reflib@nist.gov.

Created February 13, 2018, Updated October 12, 2021