Today, NIST has published two documents on version 1.3 of the Security Content Automation Protocol (SCAP):
These two publications and a set of associated schemas collectively define the technical specification for SCAP version 1.3, which is based on enhancements and clarifications to the SCAP 1.2 specification.
SP 800-126A is a new publication that allows SCAP 1.3 to take advantage of particular minor version updates to SCAP component specifications, as well as particular Open Vulnerability and Assessment Language (OVAL) core schema and platform schema versions.
Security and Privacy: security automation