NIST Publishes Version 1.3 of the Security Content Automation Protocol (SCAP)
February 14, 2018

Today, NIST has published two documents on version 1.3 of the Security Content Automation Protocol (SCAP):

• Special Publication (SP) 800-126 Revision 3, The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3; and
• SP 800-126A, SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3.

These two publications and a set of associated schemas collectively define the technical specification for SCAP version 1.3, which is based on enhancements and clarifications to the SCAP 1.2 specification.

SP 800-126A is a new publication that allows SCAP 1.3 to take advantage of particular minor version updates to SCAP component specifications, as well as particular Open Vulnerability and Assessment Language (OVAL) core schema and platform schema versions.