From the course: ISC2 Systems Security Certified Practitioner (SSCP) (2024) Cert Prep

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

SCAP

SCAP

From the course: ISC2 Systems Security Certified Practitioner (SSCP) (2024) Cert Prep

Start my 1-month free trial Buy for my team

SCAP

“

- [Instructor] You've probably already figured out that there's a ton of jargon in the world of vulnerability management and that jargon can be a little bit confusing. We might use the terms web application vulnerability, SQL injection issue, and input validation flaw all to refer to the same issue. We also might talk about a vulnerability as being severe, critical, or urgent. There's a lot of ambiguity in our language and that ambiguity is not only confusing for all of us, it can also prevent us from automating vulnerability activities. It's as if our systems don't speak the same language. That's where the Security Content Automation Protocol, SCAP, comes into play. SCAP is an effort led by the National Institute for Standards and Technology to create a consistent language and format for discussing security issues. Systems that adhere to SCAP standards are able to share information in a way that describes environments…

Contents