Security content automation protocol (SCAP)

• SCAP on debian - https://wiki.debian.org/UsingSCAP

• SCAP on freeBSD -

  • https://conshell.net/wiki/User:Delimiter/Projects/FreeBSD_CVE
  • https://www.vuxml.org/freebsd/pkg-portaudit.html

• SCAP reports comparisons - https://github.com/jordancaraballo/scaptest

• Technical introduction to SCAP - https://www.energy.gov/sites/prod/files/cioprod/documents/Technical_Introduction_to_SCAP_-_Charles_Schmidt.pdf

• SCAP and stig workshop - http://people.redhat.com/swells/FAA%20SCAP%20Workshop.pdf

• Automated security compliance using SCAP - https://www.nccs.nasa.gov/sites/default/files/Poster_Jordan_CaraballoVega_Greenbelt_CompScienceIT.pdf

• Security vs compliance

  • https://www.tripwire.com/state-of-security/security-data-protection/security-compliance-difference/
  • http://techgenix.com/security-and-compliance/

Presentations

• Compliance awareness - https://www.slideshare.net/bizsprite/compliance-awareness
• Security and compliance - https://www.slideshare.net/AmazonWebServices/1400-security-compliance-in-the-cloud-v02