Security Content Automation Protocol (SCAP)
- •
def
- •
a NIST-managed specification that lets different security tools (NGFWs, IPS, vulnerability scanners, etc.) identify and act on the same criteria
- •
- •
uses
- •
validating security configuration, confirming patch installs, scanning for a security breach
- •
- •
benefit
- •
enables automation even between different tools/vendors — ongoing monitoring, alerting, and remediation of noncompliant systems
- •
- •
related