What is SCAP?
NIST recently established a suite of interoperable and automatable security standards known as the Security Content Automation Protocol (SCAP). By virtue of using XML-based standards, SCAP is simultaneously machine and human readable. Specifically, the National Vulnerability Database is being expanded to host SCAP reference data. More information about SCAP may be found at http://nvd.nist.gov/scap.cfm.