+1 coinfor reading to the end
+1
Home / Glossary / SCAP
Glossary · Security

SCAP

Security Content Automation Protocol

In plain language

A US set of standards that lets security tools check computers for settings and weaknesses in a common format.

The metaphor

Like a universal barcode system, so every scanner reads the same code.

Going deeper

How it works

  • It covers how checks are written and results are reported.
  • Some security scanners support it.
  • It helps compare results across tools.
  • It matters mostly to auditors and large organisations.
In practice
  • A scanner reports using the standard format.
  • An auditor runs a prepared set of checks.
  • A team compares computers against a baseline.

A question owners ask

Do I need to use it?

No. It may sit behind the scenes of tools your provider uses.

Related terms
AAAAuthentication, Authorization, and AccountingAccount takeoverACLAccess Control ListAdmin accountAESAdvanced Encryption StandardAES-256Advanced Encryption Standards 256-bitAISAutomated Indicator SharingAPTAdvanced Persistent Threat

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →