Who authors SCAP checklists and test procedures?
SCAP checklists and test procedures are authored, tested, and approved according to the National Checklist Program. More specifically, SCAP checklists and test procedures can be authored by almost any entity, including vendors of the actual products. SCAP checklists and test procedures are then processed through the eight-step NIST Special Publication 800-70 IT Product Checklist Lifecycle. Subsequently, SCAP checklists and test procedures become officially acknowledged and published. All SCAP checklists are either published within, or referenced by, the National Vulnerability Database (NVD) web site. SCAP checklists conform to the SCAP XCCDF style guide and template.
