How can agencies report their compliance to the FDCC?
Agencies must use tools that are SCAP-validated with FDCC Scanner Capability to scan for both FDCC configurations and configuration deviations approved by department or agency accrediting authority. Agencies must also use these tools when monitoring use of these configurations as part of FISMA continuous monitoring.