SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3

Published: February 14, 2018


Harold Booth, David A. Waltermire, Mark L. Badger, Melanie Cook, Stephen D. Quinn, Karen Scarfone


The Security Content Automation Protocol (SCAP) is a multi-purpose framework of component specifications that support automated configuration, vulnerability, and patch checking, security measurement, and technical control compliance activities. The SCAP version 1.3 specification is defined by the combination of NIST Special Publication (SP) 800-126 Revision 3, a set of schemas, and this document. This document allows the use of particular minor version updates to SCAP 1.3 component specifications and the use of particular Open Vulnerability and Assessment Language (OVAL) core schema and platform schema versions. Allowing use of these updates and schemas provides additional functionality for SCAP 1.3 without causing any loss of existing functionality.
Citation: Special Publication (NIST SP) - 800-126A
Report Number:
Pub Type: NIST Pubs


Open Vulnerability and Assessment Language (OVAL), security automation, security configuration, Security Content Automation Protocol (SCAP)
Created February 14, 2018, Updated November 10, 2018