[Xccdf-dev] Seeking comments on SCAP 1.3 draft publications

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view

[Xccdf-dev] Seeking comments on SCAP 1.3 draft publications

Karen Scarfone

NIST invites comments on two draft publications on SCAP. The first is Special Publication (SP) 800-126 Revision 3, The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3. The second is SP 800-126A, SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3.

SP 800-126 Revision 3 and SP 800-126A collectively define the proposed technical specification for SCAP version 1.3, which is based on enhancements and clarifications to the SCAP 1.2 specification. SP 800-126A is a new publication that allows SCAP 1.3 to take advantage of selected minor version updates of SCAP component specifications, as well as designated Open Vulnerability and Assessment Language (OVAL) platform schema versions.

Both draft publications are available for download from http://csrc.nist.gov/publications/PubsDrafts.html#SP-800-126-Rev-3. Email comments on the drafts to [hidden email] (Subject: "Comments on Draft SP 800-126"). Comments are due by August 19, 2016.

Karen Scarfone
Guest Researcher, NIST

XCCDF-dev mailing list
[hidden email]
To unsubscribe, send an email message to [hidden email].