Security Content Automation Protocol

<!DOCTYPE html> <html lang="en-us" xml:lang="en-us"> <head><script type="text/javascript" src="/_static/js/bundle-playback.js?v=HxkREWBo" charset="utf-8"></script> <script type="text/javascript" src="/_static/js/wombat.js?v=txqj7nKC" charset="utf-8"></script> <script>window.RufflePlayer=window.RufflePlayer||{};window.RufflePlayer.config={"autoplay":"on","unmuteOverlay":"hidden"};</script> <script type="text/javascript" src="/_static/js/ruffle/ruffle.js"></script> <script type="text/javascript"> __wm.init("https://web.archive.org/web"); __wm.wombat("https://csrc.nist.gov/projects/security-content-automation-protocol","20230205075430","https://web.archive.org/","web","/_static/", "1675583670"); </script> <link rel="stylesheet" type="text/css" href="/_static/css/banner-styles.css?v=S1zqJCYt" /> <link rel="stylesheet" type="text/css" href="/_static/css/iconochive.css?v=3PDvdIFv" />  <meta charset="utf-8"/> <title>Security Content Automation Protocol | CSRC</title> <meta http-equiv="content-type" content="text/html; charset=UTF-8"/> <meta http-equiv="content-style-type" content="text/css"/> <meta http-equiv="content-script-type" content="text/javascript"/> <meta name="viewport" content="width=device-width, initial-scale=1.0"/> <meta name="msapplication-config" content="/CSRC/Media/images/favicons/browserconfig.xml"/> <meta name="theme-color" content="#000000"/> <meta name="google-site-verification" content="xbrnrVYDgLD-Bd64xHLCt4XsPXzUhQ-4lGMj4TdUUTA"/> <meta name="description" content="The Security Content Automation Protocol (SCAP) is a synthesis of interoperable specifications derived from community ideas. Community participation is a great strength for SCAP, because the security automation community ensures the broadest possible range..."/>  <meta name="dcterms.title" content="Security Content Automation Protocol | CSRC | CSRC"/> <meta name="dcterms.description" content="The Security Content Automation Protocol (SCAP) is a synthesis of interoperable specifications derived from community ideas. Community participation is a great strength for SCAP, because the security automation community ensures the broadest possible range..."/> <meta name="dcterms.creator" content="Computer Security Division, Information Technology Laboratory, National Institute of Standards and Technology, U.S. Department of Commerce"/> <meta name="dcterms.date.created" scheme="ISO8601" content="2016-12-07"/> <meta name="dcterms.date.reviewed" scheme="ISO8601" content="2022-01-10"/> <meta name="dcterms.language" scheme="DCTERMS.RFC1766" content="EN-US"/>  <meta name="og:site_name" content="CSRC | NIST"/> <meta name="og:type" content="article"/> <meta name="og:url" content="https://web.archive.org/web/20230205075430im_/https://csrc.nist.gov/projects/security-content-automation-protocol"/> <meta name="og:title" content="Security Content Automation Protocol | CSRC | CSRC"/> <meta name="og:description" content="The Security Content Automation Protocol (SCAP) is a synthesis of interoperable specifications derived from community ideas. Community participation is a great strength for SCAP, because the security automation community ensures the broadest possible range of use cases is reflected in SCAP functionality. This Web site is provided to support continued community involvement. From this site, you will find information about both existing SCAP specifications and emerging specifications relevant to NIST's security automation agenda. You are invited to participate, whether monitoring community dialog or leading more substantive activities like specification authorship. NIST's security automation agenda is broader than the vulnerability management application of modern day SCAP. Many different security activities and disciplines can benefit from standardized expression and reporting. We envision further expansion in compliance, remediation, and network monitoring, and encourage your contribution relative to these..."/> <meta name="article:tag" content="configuration management; patch management; security automation; security measurement; vulnerability management"/> <meta name="article:published_time" content="2016-12-07"/> <meta name="article:modified_time" content="2022-01-10"/> <meta name="og:image" content="https://web.archive.org/web/20230205075430im_/https://csrc.nist.gov/CSRC/media/images/CSRC-logo-open-graph.png"/> <link rel="apple-touch-icon" sizes="180x180" href="/web/20230205075430im_/https://csrc.nist.gov/images/icons/apple-touch-icon.png"/> <link rel="icon" type="image/png" href="/web/20230205075430im_/https://csrc.nist.gov/images/icons/favicon-32x32.png" sizes="32x32"/> <link rel="icon" type="image/png" href="/web/20230205075430im_/https://csrc.nist.gov/images/icons/favicon-16x16.png" sizes="16x16"/> <link rel="manifest" href="/web/20230205075430/https://csrc.nist.gov/images/icons/manifest.json"/> <link rel="mask-icon" href="/web/20230205075430im_/https://csrc.nist.gov/images/icons/safari-pinned-tab.svg" color="#000000"/> <link href="/web/20230205075430im_/https://csrc.nist.gov/CSRC/Media/images/favicons/favicon.ico" type="image/x-icon" rel="shortcut icon"/> <link href="/web/20230205075430im_/https://csrc.nist.gov/CSRC/Media/images/favicons/favicon.ico" type="image/x-icon" rel="icon"/>  <link href="/web/20230205075430cs_/https://csrc.nist.gov/dist/app.css" rel="stylesheet"/>  <style> .grecaptcha-badge { visibility: hidden; } </style> <script async type="text/javascript" id="_fed_an_ua_tag" src="https://web.archive.org/web/20230205075430js_/https://dap.digitalgov.gov/Universal-Federated-Analytics-Min.js?agency=nist&subagency=csrc&pua=UA-66610693-15&yt=true&exts=xsd,xml,wav,mpg,mpeg,avi,rtf,webm,ogg,ogv,oga,map,otf,eot,svg,ttf,woff"></script> <style id="antiClickjack"> body > * { display: none !important; } #antiClickjack { display: block !important; } </style> <noscript> <style id="antiClickjackNoScript"> body > * { display: block !important; } #antiClickjack { display: none !important; } </style> </noscript> <script type="text/javascript" id="antiClickjackScript"> if (self === top) { // no clickjacking var antiClickjack = document.getElementById("antiClickjack"); antiClickjack.parentNode.removeChild(antiClickjack); } else { setTimeout(tryForward(), 5000); } function tryForward() { top.location = self.location; } </script>  <script async src="https://web.archive.org/web/20230205075430js_/https://www.googletagmanager.com/gtag/js?id=G-TSQ0PLGJZP"></script> <script>window.dataLayer = window.dataLayer || []; function gtag() { dataLayer.push(arguments); } gtag('js', new Date()); gtag('config', 'G-TSQ0PLGJZP');</script> </head> <body> <div id="antiClickjack" style="display: none;"> <strong style="font-size: 1.6rem;">You are viewing this page in an unauthorized frame window.</strong> <p>This is a potential security issue, you are being redirected to <a href="https://web.archive.org/web/20230205075430/https://csrc.nist.gov/">https://csrc.nist.gov</a>.</p> </div> <section class="usa-banner" aria-label="Official government website"> <div class="usa-accordion container"> <header class="usa-banner__header"> <noscript> <p style="font-size: 0.85rem; font-weight: bold;">You have JavaScript disabled. This site requires JavaScript to be enabled for complete site functionality.</p> </noscript> <img class="usa-banner__header-flag" src="/web/20230205075430im_/https://csrc.nist.gov/images/usbanner/us_flag_small.png" alt="U.S. flag">   <span class="usa-banner__header-text">An official website of the United States government</span> <button id="gov-banner-button" class="usa-accordion__button usa-banner__button" data-toggle="collapse" data-target="#gov-banner" aria-expanded="true" aria-controls="gov-banner"> <span class="usa-banner__button-text">Here's how you know</span> </button> </header> <div class="usa-banner__content usa-accordion__content collapse in" role="tabpanel" id="gov-banner" aria-expanded="true"> <div class="row"> <div class="col-md-5 col-sm-12"> <div class="row"> <div class="col-sm-2 col-xs-3"> <img class="usa-banner__icon usa-media-block__img" src="/web/20230205075430im_/https://csrc.nist.gov/images/usbanner/icon-dot-gov.svg" alt="Dot gov"> </div> <div class="col-sm-10 col-xs-9"> <p> <strong>Official websites use .gov</strong> <br> A <strong>.gov</strong> website belongs to an official government organization in the United States. </p> </div> </div> </div> <div class="col-md-5 col-sm-12"> <div class="row"> <div class="col-sm-2 col-xs-3"> <img class="usa-banner__icon usa-media-block__img" src="/web/20230205075430im_/https://csrc.nist.gov/images/usbanner/icon-https.svg" alt="Https"> </div> <div class="col-sm-10 col-xs-9"> <p> <strong>Secure .gov websites use HTTPS</strong> <br> A <strong>lock</strong> (<img class="usa-banner__lock" src="/web/20230205075430im_/https://csrc.nist.gov/images/usbanner/lock.svg" alt="Dot gov">) or <strong>https://</strong> means you've safely connected to the .gov website. Share sensitive information only on official, secure websites. </p> </div> </div> </div> </div> </div> </div> </section> <nav id="navbar" class="navbar"> <div id="nist-menu-container" class="container"> <div class="row">  <div class="col-xs-6 col-md-4 navbar-header"> <a class="navbar-brand" href="https://web.archive.org/web/20230205075430/https://www.nist.gov/" target="_blank" id="navbar-brand-image"> <img src="/web/20230205075430im_/https://csrc.nist.gov/CSRC/media/images/svg/nist-logo.svg" alt="National Institute of Standards and Technology" width="110" height="30"> </a> </div> <div class="col-xs-6 col-md-8 navbar-nist-logo"> <div class="form-inline hidden-sm hidden-xs"> <form name="site-search" id="site-search-form" action="/web/20230205075430/https://csrc.nist.gov/search" method="GET"> <label for="search-csrc-query" class="element-invisible">Search</label> <input autocomplete="off" class="form-control" id="search-csrc-query" name="keywords" type="text" size="15" maxlength="128" placeholder="Search CSRC"/> <input type="hidden" name="ipp" value="25"/> <input type="hidden" name="sortBy" value="relevance"/> <input type="hidden" name="showOnly" value="publications,projects,news,events,presentations,glossary,topics"/> <input type="hidden" name="topicsMatch" value="ANY"/> <input type="hidden" name="status" value="Final,Draft"/> <input type="hidden" name="series" value="FIPS,SP,NISTIR,ITL Bulletin,White Paper,Building Block,Use Case,Journal Article,Conference Paper,Book"/> <button type="submit" id="search-csrc-submit-btn" class="form-submit"> <span class="element-invisible">Search</span> <i class="fa fa-search"></i> </button> </form> </div> <span id="nvd-menu-button" class="pull-right"> <a href="#" id="nvd-menu-button-link"> <span class="fa fa-bars"></span> <span id="nvd-menu-full-text">CSRC MENU</span> </a> </span> </div> </div> </div> <div class="form-inline hidden-md hidden-lg"> <form name="site-search-mobile" id="site-search-form-mobile" action="/web/20230205075430/https://csrc.nist.gov/search" method="GET"> <label for="search-csrc-query-mobile" class="element-invisible">Search</label> <input autocomplete="off" class="form-control" id="search-csrc-query-mobile" name="keywords" type="text" size="15" maxlength="128" placeholder="Search CSRC"/> <button type="submit" id="search-csrc-submit-btn-mobile" class="form-submit"> <span class="element-invisible">Search</span> <i class="fa fa-search"></i> </button> </form> </div> <div class="main-menu-row container">  <div id="main-menu-drop" class="col-lg-12" style="display: none;"> <ul> <li><a href="/web/20230205075430/https://csrc.nist.gov/projects">Projects</a></li> <li> <a href="/web/20230205075430/https://csrc.nist.gov/publications"> Publications <span class="expander fa fa-plus" id="main-menu-pubs-expander" data-expander-name="publications" data-expanded="false"> <span class="element-invisible">Expand or Collapse</span> </span> </a> <div style="display: none;" class="sub-menu" data-expander-trigger="publications" id="main-menu-pubs-expanded"> <div class="row"> <div class="col-lg-4"> <p><a href="/web/20230205075430/https://csrc.nist.gov/publications/drafts-open-for-comment">Drafts for Public Comment</a></p> <p><a href="/web/20230205075430/https://csrc.nist.gov/publications/draft-pubs">All Public Drafts</a></p> <p><a href="/web/20230205075430/https://csrc.nist.gov/publications/final-pubs">Final Pubs</a></p> <p><a href="/web/20230205075430/https://csrc.nist.gov/publications/fips">FIPS</a></p> </div> <div class="col-lg-4"> <p><a href="/web/20230205075430/https://csrc.nist.gov/publications/sp">Special Publications (SP<small>s</small>)</a></p> <p><a href="/web/20230205075430/https://csrc.nist.gov/publications/nistir">NISTIR<small>s</small></a></p> <p><a href="/web/20230205075430/https://csrc.nist.gov/publications/itl-bulletin">ITL Bulletins</a></p> <p><a href="/web/20230205075430/https://csrc.nist.gov/publications/white-paper">White Papers</a></p> </div> <div class="col-lg-4"> <p><a href="/web/20230205075430/https://csrc.nist.gov/publications/journal-article">Journal Articles</a></p> <p><a href="/web/20230205075430/https://csrc.nist.gov/publications/conference-paper">Conference Papers</a></p> <p><a href="/web/20230205075430/https://csrc.nist.gov/publications/book">Books</a></p> </div> </div> </div> </li> <li> <a href="/web/20230205075430/https://csrc.nist.gov/topics"> Topics <span class="expander fa fa-plus" id="main-menu-topics-expander" data-expander-name="topics" data-expanded="false"> <span class="element-invisible">Expand or Collapse</span> </span> </a> <div style="display: none;" class="sub-menu" data-expander-trigger="topics" id="main-menu-topics-expanded"> <div class="row"> <div class="col-lg-4"> <p><a href="/web/20230205075430/https://csrc.nist.gov/Topics/Security-and-Privacy">Security & Privacy</a></p> <p><a href="/web/20230205075430/https://csrc.nist.gov/Topics/Applications">Applications</a></p> </div> <div class="col-lg-4"> <p><a href="/web/20230205075430/https://csrc.nist.gov/Topics/Technologies">Technologies</a></p> <p><a href="/web/20230205075430/https://csrc.nist.gov/Topics/Sectors">Sectors</a></p> </div> <div class="col-lg-4"> <p><a href="/web/20230205075430/https://csrc.nist.gov/Topics/Laws-and-Regulations">Laws & Regulations</a></p> <p><a href="/web/20230205075430/https://csrc.nist.gov/Topics/Activities-and-Products">Activities & Products</a></p> </div> </div> </div> </li> <li><a href="/web/20230205075430/https://csrc.nist.gov/news">News & Updates</a></li> <li><a href="/web/20230205075430/https://csrc.nist.gov/events">Events</a></li> <li><a href="/web/20230205075430/https://csrc.nist.gov/glossary">Glossary</a></li> <li> <a href="/web/20230205075430/https://csrc.nist.gov/about"> About CSRC <span class="expander fa fa-plus" id="main-menu-about-expander" data-expander-name="about" data-expanded="false"> <span class="element-invisible">Expand or Collapse</span> </span> </a> <div style="display: none;" class="sub-menu" data-expander-trigger="about" id="main-menu-about-expanded"> <div class="row"> <div class="col-lg-6"> <p> <strong><a href="/web/20230205075430/https://csrc.nist.gov/Groups/Computer-Security-Division">Computer Security Division</a></strong><br/> <ul> <li><a href="/web/20230205075430/https://csrc.nist.gov/Groups/Computer-Security-Division/Cryptographic-Technology">Cryptographic Technology</a></li> <li><a href="/web/20230205075430/https://csrc.nist.gov/Groups/Computer-Security-Division/Secure-Systems-and-Applications">Secure Systems and Applications</a></li> <li><a href="/web/20230205075430/https://csrc.nist.gov/Groups/Computer-Security-Division/Security-Components-and-Mechanisms">Security Components and Mechanisms</a></li> <li><a href="/web/20230205075430/https://csrc.nist.gov/Groups/Computer-Security-Division/Security-Engineering-and-Risk-Management">Security Engineering and Risk Management</a></li> <li><a href="/web/20230205075430/https://csrc.nist.gov/Groups/Computer-Security-Division/Security-Testing-Validation-and-Measurement">Security Testing, Validation, and Measurement</a></li> </ul> </p> </div> <div class="col-lg-6"> <p> <strong><a href="/web/20230205075430/https://csrc.nist.gov/Groups/Applied-Cybersecurity-Division">Applied Cybersecurity Division</a></strong><br/> <ul> <li><a href="/web/20230205075430/https://csrc.nist.gov/Groups/Applied-Cybersecurity-Division/Cybersecurity-and-Privacy-Applications">Cybersecurity and Privacy Applications</a></li> <li><a href="/web/20230205075430/https://csrc.nist.gov/Groups/Applied-Cybersecurity-Division/National-Cybersecurity-Center-of-Excellence">National Cybersecurity Center of Excellence (NCCoE)</a></li> <li><a href="https://web.archive.org/web/20230205075430/https://www.nist.gov/nice/">National Initiative for Cybersecurity Education (NICE)</a></li> </ul> </p> <p> <a href="/web/20230205075430/https://csrc.nist.gov/contact"> Contact Us </a> </p> </div> </div> </div> </li> </ul> </div> </div> </nav> <section id="itl-header" class="has-menu"> <div class="container"> <div class="row"> <div class="col-sm-12 col-md-8"> <div class="hidden-xs hidden-sm" id="itl-header-lg"> <a href="https://web.archive.org/web/20230205075430/https://www.nist.gov/itl" target="_blank" id="itl-header-link">Information Technology Laboratory</a> </div> <div class="hidden-xs hidden-sm" id="csrc-header-lg"> <a href="/web/20230205075430/https://csrc.nist.gov/" id="csrc-header-link-lg">Computer Security Resource Center</a> </div> </div> <div class="col-sm-12 col-md-4"> <div class="hidden-xs hidden-sm hidden-md"> <a id="logo-csrc-lg" href="/web/20230205075430/https://csrc.nist.gov/"><img id="img-logo-csrc-lg" src="/web/20230205075430im_/https://csrc.nist.gov/CSRC/Media/images/nist-logo-csrc-white.svg" alt="CSRC Logo" class="csrc-header-logo"></a> </div> <div class="hidden-lg"> <a id="logo-csrc-sm" href="/web/20230205075430/https://csrc.nist.gov/"><img id="img-logo-csrc-sm" src="/web/20230205075430im_/https://csrc.nist.gov/CSRC/Media/images/nist-logo-csrc-white.svg" alt="CSRC Logo" class="csrc-header-logo"></a> </div> </div> </div> </div> </section> <div id="body-section" class="container"> <div class="breadcrumb"> <a href="/web/20230205075430/https://csrc.nist.gov/projects" class="breadcrumb-link">Projects</a> </div> <h1 id="projectName">Security Content Automation Protocol <small id="project-acronym">SCAP</small></h1> <div class="page-social-buttons" id=""news-social-buttons""> <a href="https://web.archive.org/web/20230205075430/https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcontent.csrc.e1a.nist.gov%2Fprojects%2Fsecurity-content-automation-protocol" class="social-facebook"><i class="fa fa-facebook fa-fw" aria-hidden="true"></i><span class="sr-only">Share to Facebook</span></a> <a href="https://web.archive.org/web/20230205075430/https://twitter.com/share?url=https%3A%2F%2Fcontent.csrc.e1a.nist.gov%2Fprojects%2Fsecurity-content-automation-protocol" class="social-twitter"><i class="fa fa-twitter fa-fw" aria-hidden="true"></i><span class="sr-only">Share to Twitter</span></a> </div> <div class="row visible-sm visible-xs visible-md"> <div class="col-sm-12"> <div class="bs-callout bs-callout-subnav" id="projectLinksContainer-sm"> <h4><i class="fa fa-link"></i> Project Links</h4> <div class="project-icons-container"> <span> <a href="/web/20230205075430/https://csrc.nist.gov/projects/Security-Content-Automation-Protocol" id="NavOverviewLink-sm"> <i class="fa fa-info-circle"></i> Overview </a> </span> <span> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/faqs" id="NavFaqsLink-sm"> <i class="fa fa-question-circle"></i> FAQs </a> </span> <span> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/news" id="NavNewsLink-sm" data-count="7"> <i class="fa fa-newspaper-o"></i> News & Updates </a> </span> <span> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/events" id="NavEventsLink-sm" data-count="3"> <i class="fa fa-calendar-o"></i> Events </a> </span> <span> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/publications" id="NavPubsLink-sm" data-count="15"> <i class="fa fa-file-text"></i> Publications </a> </span> </div> </div> </div> </div> <div class="row"> <div class="col-lg-8 col-sm-12"> <h3>Overview</h3> <div id="overview"> <p>The Security Content Automation Protocol (SCAP) is a synthesis of interoperable specifications derived from community ideas. Community participation is a great strength for SCAP, because the security automation community ensures the broadest possible range of use cases is reflected in SCAP functionality. This Web site is provided to support continued community involvement. From this site, you will find information about both <a data-csrc-link="true" data-node-guid="db97eb36-f877-4b10-876d-3a3ff2c6c1ba" href="/web/20230205075430/https://csrc.nist.gov/projects/security-content-automation-protocol/scap-releases">existing SCAP specifications</a> and <a href="/web/20230205075430/https://csrc.nist.gov/projects/security-content-automation-protocol/emerging-specifications">emerging specifications</a> relevant to NIST's security automation agenda. You are invited to participate, whether monitoring community dialog or leading more substantive activities like specification authorship.</p> <p>NIST's security automation agenda is broader than the vulnerability management application of modern day SCAP. Many different security activities and disciplines can benefit from standardized expression and reporting. We envision further expansion in compliance, remediation, and network monitoring, and encourage your contribution relative to these and additional disciplines. NIST is also working on this expansion plan, so please communicate with the <a href="https://web.archive.org/web/20230205075430/mailto:scap@nist.gov">SCAP Team</a> early and often to ensure proper coordination of efforts.</p> </div> </div> <div class="col-lg-4 hidden-xs hidden-sm hidden-md"> <div class="project-nav-container"> <div class="bs-callout bs-callout-subnav" id="projectLinksContainer-lg"> <h4><i class="fa fa-link"></i> Project Links</h4> <div class="project-icons-container"> <span> <a href="/web/20230205075430/https://csrc.nist.gov/projects/Security-Content-Automation-Protocol" id="SideNavOverviewLink"> <i class="fa fa-info-circle"></i> Overview </a> </span> <span> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/faqs" id="SideNavFaqsLink"> <i class="fa fa-question-circle"></i> FAQs </a> </span> <span> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/news" id="SideNavNewsLink" data-count="7"> <i class="fa fa-newspaper-o"></i> News & Updates </a> </span> <span> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/events" id="SideNavEventsLink" data-count="3"> <i class="fa fa-calendar-o"></i> Events </a> </span> <span> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/publications" id="SideNavPubsLink" data-count="15"> <i class="fa fa-file-text"></i> Publications </a> </span> </div> <h4>Additional Pages</h4> <div id="projectPagesCallout-lg"> <a class="csrc-add-page" data-node-level="0" data-node-order="2" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Release-Cycle" id="projPage0" style="border-left: solid 0rem transparent;">Release Cycle</a> <a class="csrc-add-page" data-node-level="0" data-node-order="3" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/SCAP-Content" id="projPage1" style="border-left: solid 0rem transparent;">SCAP Content</a> <a class="csrc-add-page" data-node-level="0" data-node-order="4" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/SCAP-Releases" id="projPage2" style="border-left: solid 0rem transparent;">SCAP Releases</a> <a class="csrc-add-page" data-node-level="1" data-node-order="2" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/SCAP-Releases/scap-1-3" id="projPage3" style="border-left: solid 1rem transparent;">SCAP 1.3</a> <a class="csrc-add-page" data-node-level="1" data-node-order="3" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/SCAP-Releases/SCAP-1-2" id="projPage4" style="border-left: solid 1rem transparent;">SCAP 1.2</a> <a class="csrc-add-page" data-node-level="1" data-node-order="4" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/SCAP-Releases/SCAP-1-1" id="projPage5" style="border-left: solid 1rem transparent;">SCAP 1.1</a> <a class="csrc-add-page" data-node-level="1" data-node-order="5" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/SCAP-Releases/SCAP-1-0" id="projPage6" style="border-left: solid 1rem transparent;">SCAP 1.0</a> <a class="csrc-add-page" data-node-level="0" data-node-order="5" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications" id="projPage7" style="border-left: solid 0rem transparent;">SCAP Specifications</a> <a class="csrc-add-page" data-node-level="1" data-node-order="1" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/aid" id="projPage8" style="border-left: solid 1rem transparent;">Asset Identification</a> <a class="csrc-add-page" data-node-level="1" data-node-order="2" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/arf" id="projPage9" style="border-left: solid 1rem transparent;">Asset Reporting Format (ARF)</a> <a class="csrc-add-page" data-node-level="1" data-node-order="3" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/common-configuration-enumeration-cce" id="projPage10" style="border-left: solid 1rem transparent;">Common Configuration Enumeration (CCE)</a> <a class="csrc-add-page" data-node-level="1" data-node-order="4" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/cpe" id="projPage11" style="border-left: solid 1rem transparent;">Common Platform Enumeration (CPE)</a> <a class="csrc-add-page" data-node-level="2" data-node-order="1" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/cpe/applicability-language" id="projPage12" style="border-left: solid 2rem transparent;">Applicability Language</a> <a class="csrc-add-page" data-node-level="2" data-node-order="2" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/cpe/dictionary" id="projPage13" style="border-left: solid 2rem transparent;">Dictionary</a> <a class="csrc-add-page" data-node-level="2" data-node-order="3" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/cpe/name-matching" id="projPage14" style="border-left: solid 2rem transparent;">Name Matching</a> <a class="csrc-add-page" data-node-level="2" data-node-order="4" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/cpe/naming" id="projPage15" style="border-left: solid 2rem transparent;">Naming</a> <a class="csrc-add-page" data-node-level="1" data-node-order="5" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/Open-Vulnerability-Assessment-Language" id="projPage16" style="border-left: solid 1rem transparent;">Open Vulnerability Assessment Language (OVAL)</a> <a class="csrc-add-page" data-node-level="1" data-node-order="6" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/ocil" id="projPage17" style="border-left: solid 1rem transparent;">Open Checklist Interactive Language (OCIL)</a> <a class="csrc-add-page" data-node-level="1" data-node-order="7" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/tmsad" id="projPage18" style="border-left: solid 1rem transparent;">Trust Model for Security Automation Data (TMSAD)</a> <a class="csrc-add-page" data-node-level="1" data-node-order="8" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/xccdf" id="projPage19" style="border-left: solid 1rem transparent;">Extensible Configuration Checklist Description Format (XCCDF)</a> <a class="csrc-add-page" data-node-level="1" data-node-order="9" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/swid" id="projPage20" style="border-left: solid 1rem transparent;">Software Identification (SWID)</a> <a class="csrc-add-page" data-node-level="0" data-node-order="6" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Emerging-Specifications" id="projPage21" style="border-left: solid 0rem transparent;">Emerging Specifications</a> <a class="csrc-add-page" data-node-level="1" data-node-order="1" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Emerging-Specifications/Emerging-Specification-Listing" id="projPage22" style="border-left: solid 1rem transparent;">Emerging Specification Listing</a> <a class="csrc-add-page" data-node-level="1" data-node-order="2" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Emerging-Specifications/asr" id="projPage23" style="border-left: solid 1rem transparent;">Asset Summary Reporting (ASR)</a> <a class="csrc-add-page" data-node-level="0" data-node-order="7" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/SCAP-Community" id="projPage24" style="border-left: solid 0rem transparent;">SCAP Community</a> </div> </div> </div> <div class="bs-callout bs-callout-success" id="contactsCallout-lg"> <h4><i class="fa fa-user"></i> Contacts</h4> <p id="projContact0"><span class="contact-display"><strong data-field="full-name"> <span data-field="firstname">SCAP</span> <span data-field="lastname">Inquiries</span> </strong><br/><a href="https://web.archive.org/web/20230205075430/mailto:scap@nist.gov" data-field="email">scap@nist.gov</a><br/></span></p> </div> <div class="bs-callout bs-callout-danger" id="topicsCallout-lg"> <h4><i class="fa fa-tag"></i> Topics</h4> <p> <strong id="catName0-lg">Security and Privacy:</strong> <a id="catTopLink0-0-lg" href="/web/20230205075430/https://csrc.nist.gov/Topics/Security-and-Privacy/security-programs-and-operations/configuration-management">configuration management</a>, <a id="catTopLink0-1-lg" href="/web/20230205075430/https://csrc.nist.gov/Topics/Security-and-Privacy/security-programs-and-operations/patch-management">patch management</a>, <a id="catTopLink0-2-lg" href="/web/20230205075430/https://csrc.nist.gov/Topics/Security-and-Privacy/security-programs-and-operations/security-automation">security automation</a>, <a id="catTopLink0-3-lg" href="/web/20230205075430/https://csrc.nist.gov/Topics/Security-and-Privacy/security-measurement">security measurement</a>, <a id="catTopLink0-4-lg" href="/web/20230205075430/https://csrc.nist.gov/Topics/Security-and-Privacy/risk-management/vulnerability-management">vulnerability management</a> </p> </div> <div class="bs-callout bs-callout-warning" id="relatedProjectsCallout-lg"> <h4>Related Projects</h4> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/devsecops" id="relProjLink0">DevSecOps</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/macos-security" id="relProjLink1">macOS Security</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/National-Checklist-Program" id="relProjLink2">National Checklist Program</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/open-security-controls-assessment-language" id="relProjLink3">Open Security Controls Assessment Language</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/security-content-automation-protocol-v2" id="relProjLink4">SCAP v2</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/scap-validation-program" id="relProjLink5">SCAP Validation Program</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/Software-Identification-SWID" id="relProjLink6">Software Identification Tagging</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/testing-laboratories" id="relProjLink7">Testing Laboratories</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/United-States-Government-Configuration-Baseline" id="relProjLink8">U.S. Government Configuration Baseline</a><br/> </div> </div> </div> <div class="row visible-sm visible-xs visible-md"> <div class="col-sm-12"> <div class="bs-callout bs-callout-subnav" id="projectPagesCallout-sm"> <h4>Additional Pages</h4> <p> <a class="csrc-add-page" data-node-level="0" data-node-order="2" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Release-Cycle" id="projPage0-sm" style="border-left: solid 0rem transparent;">Release Cycle</a> <a class="csrc-add-page" data-node-level="0" data-node-order="3" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/SCAP-Content" id="projPage1-sm" style="border-left: solid 0rem transparent;">SCAP Content</a> <a class="csrc-add-page" data-node-level="0" data-node-order="4" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/SCAP-Releases" id="projPage2-sm" style="border-left: solid 0rem transparent;">SCAP Releases</a> <a class="csrc-add-page" data-node-level="1" data-node-order="2" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/SCAP-Releases/scap-1-3" id="projPage3-sm" style="border-left: solid 1rem transparent;">SCAP 1.3</a> <a class="csrc-add-page" data-node-level="1" data-node-order="3" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/SCAP-Releases/SCAP-1-2" id="projPage4-sm" style="border-left: solid 1rem transparent;">SCAP 1.2</a> <a class="csrc-add-page" data-node-level="1" data-node-order="4" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/SCAP-Releases/SCAP-1-1" id="projPage5-sm" style="border-left: solid 1rem transparent;">SCAP 1.1</a> <a class="csrc-add-page" data-node-level="1" data-node-order="5" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/SCAP-Releases/SCAP-1-0" id="projPage6-sm" style="border-left: solid 1rem transparent;">SCAP 1.0</a> <a class="csrc-add-page" data-node-level="0" data-node-order="5" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications" id="projPage7-sm" style="border-left: solid 0rem transparent;">SCAP Specifications</a> <a class="csrc-add-page" data-node-level="1" data-node-order="1" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/aid" id="projPage8-sm" style="border-left: solid 1rem transparent;">Asset Identification</a> <a class="csrc-add-page" data-node-level="1" data-node-order="2" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/arf" id="projPage9-sm" style="border-left: solid 1rem transparent;">Asset Reporting Format (ARF)</a> <a class="csrc-add-page" data-node-level="1" data-node-order="3" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/common-configuration-enumeration-cce" id="projPage10-sm" style="border-left: solid 1rem transparent;">Common Configuration Enumeration (CCE)</a> <a class="csrc-add-page" data-node-level="1" data-node-order="4" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/cpe" id="projPage11-sm" style="border-left: solid 1rem transparent;">Common Platform Enumeration (CPE)</a> <a class="csrc-add-page" data-node-level="2" data-node-order="1" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/cpe/applicability-language" id="projPage12-sm" style="border-left: solid 2rem transparent;">Applicability Language</a> <a class="csrc-add-page" data-node-level="2" data-node-order="2" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/cpe/dictionary" id="projPage13-sm" style="border-left: solid 2rem transparent;">Dictionary</a> <a class="csrc-add-page" data-node-level="2" data-node-order="3" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/cpe/name-matching" id="projPage14-sm" style="border-left: solid 2rem transparent;">Name Matching</a> <a class="csrc-add-page" data-node-level="2" data-node-order="4" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/cpe/naming" id="projPage15-sm" style="border-left: solid 2rem transparent;">Naming</a> <a class="csrc-add-page" data-node-level="1" data-node-order="5" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/Open-Vulnerability-Assessment-Language" id="projPage16-sm" style="border-left: solid 1rem transparent;">Open Vulnerability Assessment Language (OVAL)</a> <a class="csrc-add-page" data-node-level="1" data-node-order="6" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/ocil" id="projPage17-sm" style="border-left: solid 1rem transparent;">Open Checklist Interactive Language (OCIL)</a> <a class="csrc-add-page" data-node-level="1" data-node-order="7" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/tmsad" id="projPage18-sm" style="border-left: solid 1rem transparent;">Trust Model for Security Automation Data (TMSAD)</a> <a class="csrc-add-page" data-node-level="1" data-node-order="8" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/xccdf" id="projPage19-sm" style="border-left: solid 1rem transparent;">Extensible Configuration Checklist Description Format (XCCDF)</a> <a class="csrc-add-page" data-node-level="1" data-node-order="9" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/swid" id="projPage20-sm" style="border-left: solid 1rem transparent;">Software Identification (SWID)</a> <a class="csrc-add-page" data-node-level="0" data-node-order="6" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Emerging-Specifications" id="projPage21-sm" style="border-left: solid 0rem transparent;">Emerging Specifications</a> <a class="csrc-add-page" data-node-level="1" data-node-order="1" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Emerging-Specifications/Emerging-Specification-Listing" id="projPage22-sm" style="border-left: solid 1rem transparent;">Emerging Specification Listing</a> <a class="csrc-add-page" data-node-level="1" data-node-order="2" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Emerging-Specifications/asr" id="projPage23-sm" style="border-left: solid 1rem transparent;">Asset Summary Reporting (ASR)</a> <a class="csrc-add-page" data-node-level="0" data-node-order="7" href="/web/20230205075430/https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/SCAP-Community" id="projPage24-sm" style="border-left: solid 0rem transparent;">SCAP Community</a> </p> </div> <div class="bs-callout bs-callout-subnav" id="contactsCallout-sm"> <h4><i class="fa fa-user"></i> Contacts</h4> <p style="padding-left: 15px;"> <span id="projContact0-sm"><span class="contact-display"><strong data-field="full-name"> <span data-field="firstname">SCAP</span> <span data-field="lastname">Inquiries</span> </strong><br/><a href="https://web.archive.org/web/20230205075430/mailto:scap@nist.gov" data-field="email">scap@nist.gov</a><br/></span></span><br/> </p> </div> <div class="bs-callout bs-callout-danger" id="topicsCallout-sm"> <h4><i class="fa fa-tag"></i> Topics</h4> <p> <strong id="catName0-sm">Security and Privacy:</strong> <a id="catTopLink0-0-sm" href="/web/20230205075430/https://csrc.nist.gov/Topics/Security-and-Privacy/security-programs-and-operations/configuration-management">configuration management</a>, <a id="catTopLink0-1-sm" href="/web/20230205075430/https://csrc.nist.gov/Topics/Security-and-Privacy/security-programs-and-operations/patch-management">patch management</a>, <a id="catTopLink0-2-sm" href="/web/20230205075430/https://csrc.nist.gov/Topics/Security-and-Privacy/security-programs-and-operations/security-automation">security automation</a>, <a id="catTopLink0-3-sm" href="/web/20230205075430/https://csrc.nist.gov/Topics/Security-and-Privacy/security-measurement">security measurement</a>, <a id="catTopLink0-4-sm" href="/web/20230205075430/https://csrc.nist.gov/Topics/Security-and-Privacy/risk-management/vulnerability-management">vulnerability management</a> </p> </div> <div class="bs-callout bs-callout-warning" id="relatedProjectsCallout-sm"> <h4>Related Projects</h4> <p> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/devsecops" id="relProjLink0-sm">DevSecOps</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/macos-security" id="relProjLink1-sm">macOS Security</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/National-Checklist-Program" id="relProjLink2-sm">National Checklist Program</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/open-security-controls-assessment-language" id="relProjLink3-sm">Open Security Controls Assessment Language</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/security-content-automation-protocol-v2" id="relProjLink4-sm">SCAP v2</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/scap-validation-program" id="relProjLink5-sm">SCAP Validation Program</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/Software-Identification-SWID" id="relProjLink6-sm">Software Identification Tagging</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/testing-laboratories" id="relProjLink7-sm">Testing Laboratories</a><br/> <a href="/web/20230205075430/https://csrc.nist.gov/Projects/United-States-Government-Configuration-Baseline" id="relProjLink8-sm">U.S. Government Configuration Baseline</a><br/> </p> </div> </div> </div> <div class="row"> <div class="col-md-12 historical-data-area" id="historical-data-area"> <span>Created <span id="page-created-date">December 07, 2016</span>, Updated <span id="page-updated-date">January 10, 2022</span></span> </div> </div> <div id="footer-pusher"></div> </div> <footer id="footer"> <div class="container"> <div class="row"> <div class="col-sm-6"> <span class="hidden-xs"> <a href="https://web.archive.org/web/20230205075430/https://www.nist.gov/" title="National Institute of Standards and Technology" rel="home" target="_blank" class="footer-nist-logo" id="footer-nist-logo-link"> <img src="/web/20230205075430im_/https://csrc.nist.gov/CSRC/Media/images/nist-logo-brand-white.svg" alt="National Institute of Standards and Technology logo" id="footer-nist-logo"/> </a> </span> <div class="row footer-contact-container"> <div class="col-sm-12" id="footer-address"> <strong>HEADQUARTERS</strong><br> 100 Bureau Drive<br> Gaithersburg, MD 20899 </div> </div> </div> <div class="col-sm-6"> <ul class="social-list text-right" style="display: block;"> <li class="field-item service-twitter list-horiz"> <a href="https://web.archive.org/web/20230205075430/https://twitter.com/NISTCyber" class="social-btn social-btn--large extlink ext" id="footer-social-twitter-link"> <i class="fa fa-twitter fa-fw"><span class="element-invisible">twitter</span></i><span class="ext"><span class="element-invisible"> (link is external)</span></span> </a> </li> <li class="field-item service-facebook list-horiz"> <a href="https://web.archive.org/web/20230205075430/https://www.facebook.com/NIST" class="social-btn social-btn--large extlink ext" id="footer-social-facebook-link"> <i class="fa fa-facebook fa-fw"><span class="element-invisible">facebook</span></i><span class="ext"><span class="element-invisible"> (link is external)</span></span> </a> </li> <li class="field-item service-linkedin list-horiz"> <a href="https://web.archive.org/web/20230205075430/https://www.linkedin.com/company/nist" class="social-btn social-btn--large extlink ext" id="footer-social-linkedin-link"> <i class="fa fa-linkedin fa-fw"><span class="element-invisible">linkedin</span></i><span class="ext"><span class="element-invisible"> (link is external)</span></span> </a> </li> <li class="field-item service-instagram list-horiz"> <a href="https://web.archive.org/web/20230205075430/https://www.instagram.com/usnistgov/" class="social-btn social-btn--large extlink ext" id="footer-social-instagram-link"> <i class="fa fa-instagram fa-fw"><span class="element-invisible">instagram</span></i> <span class="ext"><span class="element-invisible"> (link is external)</span></span> </a> </li> <li class="field-item service-youtube list-horiz"> <a href="https://web.archive.org/web/20230205075430/https://www.youtube.com/user/USNISTGOV" class="social-btn social-btn--large extlink ext" id="footer-social-youtube-link"> <i class="fa fa-youtube fa-fw"><span class="element-invisible">youtube</span></i><span class="ext"><span class="element-invisible"> (link is external)</span></span> </a> </li> <li class="field-item service-rss list-horiz"> <a href="https://web.archive.org/web/20230205075430/https://www.nist.gov/news-events/nist-rss-feeds" class="social-btn social-btn--large extlink" id="footer-social-rss-link"> <i class="fa fa-rss fa-fw"><span class="element-invisible">rss</span></i> </a> </li> <li class="field-item service-govdelivery list-horiz last"> <a href="https://web.archive.org/web/20230205075430/https://public.govdelivery.com/accounts/USNIST/subscriber/new?qsp=USNIST_3" class="social-btn social-btn--large extlink ext" title="Subscribe to CSRC and publication updates, and other NIST cybersecurity news" id="footer-social-govdelivery-link"> <i class="fa fa-envelope fa-fw"><span class="element-invisible">govdelivery</span></i><span class="ext"><span class="element-invisible"> (link is external)</span></span> </a> </li> </ul> <p class="text-right"> Want updates about CSRC and our publications? <a href="https://web.archive.org/web/20230205075430/https://public.govdelivery.com/accounts/USNIST/subscriber/new?qsp=USNIST_3" class="btn btn-lg btn-info" style="background-color: #12659c!important; border-color: #12659c!important;" id="footer-subscribe-link">Subscribe</a> </p> </div> </div> <div class="row hidden-sm hidden-md hidden-lg"> <div class="col-sm-12"> <a href="https://web.archive.org/web/20230205075430/https://www.nist.gov/" title="National Institute of Standards and Technology" rel="home" target="_blank" class="footer-nist-logo" id="footer-bottom-nist-logo-link"> <img src="/web/20230205075430im_/https://csrc.nist.gov/CSRC/Media/images/logo_rev.png" alt="National Institute of Standards and Technology logo" id="footer-bottom-nist-logo"/> </a> </div> </div> <div class="row"> <div class="col-sm-6"> <p> <a href="/web/20230205075430/https://csrc.nist.gov/about/contact" id="footer-contact-us-link">Contact Us</a> | <a href="https://web.archive.org/web/20230205075430/https://www.nist.gov/about-nist/our-organization" style="display: inline-block;" id="footer-org-link">Our Other Offices</a> </p> </div> <div class="col-sm-6"> <span class="pull-right text-right"> Send inquiries to <a href="https://web.archive.org/web/20230205075430/mailto:csrc-inquiry@nist.gov?subject=CSRC Inquiry" style="display: inline-block;" id="footer-inquiries-link">csrc-inquiry@nist.gov</a> </span> </div> </div> <div class="row"> <div class="footer-bottom-links-container" id="footer-bottom-links-container"> <ul> <li><a href="https://web.archive.org/web/20230205075430/https://www.nist.gov/privacy-policy">Site Privacy</a></li> <li><a href="https://web.archive.org/web/20230205075430/https://www.nist.gov/oism/accessibility">Accessibility</a></li> <li><a href="https://web.archive.org/web/20230205075430/https://www.nist.gov/privacy">Privacy Program</a></li> <li><a href="https://web.archive.org/web/20230205075430/https://www.nist.gov/oism/copyrights">Copyrights</a></li> <li><a href="https://web.archive.org/web/20230205075430/https://www.commerce.gov/vulnerability-disclosure-policy">Vulnerability Disclosure</a></li> <li><a href="https://web.archive.org/web/20230205075430/https://www.nist.gov/no-fear-act-policy">No Fear Act Policy</a></li> <li><a href="https://web.archive.org/web/20230205075430/https://www.nist.gov/foia">FOIA</a></li> <li><a href="https://web.archive.org/web/20230205075430/https://www.nist.gov/environmental-policy-statement">Environmental Policy</a></li> <li><a href="https://web.archive.org/web/20230205075430/https://www.nist.gov/summary-report-scientific-integrity">Scientific Integrity</a></li> <li><a href="https://web.archive.org/web/20230205075430/https://www.nist.gov/nist-information-quality-standards">Information Quality Standards</a></li> <li><a href="https://web.archive.org/web/20230205075430/https://www.commerce.gov/">Commerce.gov</a></li> <li><a href="https://web.archive.org/web/20230205075430/https://www.science.gov/">Science.gov</a></li> <li><a href="https://web.archive.org/web/20230205075430/https://www.usa.gov/">USA.gov</a></li> <li><a href="https://web.archive.org/web/20230205075430/https://vote.gov/">Vote.gov</a></li> </ul> </div> </div> </div> </footer> <script type="text/javascript" src="/web/20230205075430js_/https://csrc.nist.gov/dist/js/quick-collapse.js"></script> <script type="text/javascript" src="/web/20230205075430js_/https://csrc.nist.gov/dist/app.bundle.js"></script>  <script defer src="https://web.archive.org/web/20230205075430js_/https://www.google.com/recaptcha/api.js?render=6LcQo40UAAAAAJpAj4X-i-WfOzdbu6d7j7kKryDS"></script> <script type="text/javascript" src="/web/20230205075430js_/https://csrc.nist.gov/dist/projects.bundle.js"></script> </body> </html>

CINXE.COM

Security Content Automation Protocol | CSRC