Vulnerabilities Checklists Product Dictionary Impact Metrics Data Feeds Statistics
Home ISAP/SCAP SCAP Validated Tools SCAP Events About Contact Vendor Comments
white space white space

Federal Desktop Core Configuration
FDCC

FDCC Compliance Reporting

 
  • FDCC Compliance Reporting Frequently Asked Questions - 2008-03-28

    •  

    FDCC Compliance Reporting Downloads
    There are two distinct portions of FDCC compliance reporting. The first portion involves submitting an SCAP XCCDF document for each environment present within an organization. The second portion involves submitting an Excel workbook that provides a high level summary of every environment present within the organization. This Excel workbook aggregates the data collected in the SCAP XCCDF report documents. Each environment listed within the Excel workbook must reference the corresponding SCAP XCCDF document.

    Both the Excel Workbook and the XCCDF Reporting format specification can be found below:

    File

    SHA-1 Digest

    SHA-256 Digest

    Note
    FDCC Reporting Excel Workbook 1BEC1B28AD6724D613
    28AE441B79E77A324E
    B495
    		3949B9E462FB66F1882
    BF85C4C31D0338059D65
    69DA10ED5A9BAEBFB001
    CD1A7

    2008.03.31
     Small adjustment to validation in Excel Workbook to restrict the 'Deviation #' column to only accept numbers greater than 0.


    2008.03.28
     New question added to FAQ PDF relating to the password to unlock FDCC Reporting Worksheet.


    2008.03.04
     First release of FDCC Reporting Excel Workbook added.

    FDCC XCCDF Results Format Specification D06DCB4AF832FD1
    CD5C797CCA2091B
    1AD6312D0C
    		5DAA058DA02C54A3
    F9F16FDC4174FFA39
    44AD52D8E3E721C7A
    2342F87ED2A113

    2008.04.03
     Schematron file updated to include a test to ensure the 'TestResult' element is provided within the 'Benchmark.'


    2008.01.27
     Minor update to include changes in schematron rules.

     

    Comments and Questions

    Comments and questions may be addressed to fdcc@nist.gov.

     

     

     

    Disclaimer
    Any mention of commercial products or reference to commercial organizations is for information only; it does not imply recommendation or endorsement by NIST nor does it imply that the products mentioned are necessarily the best available for the purpose.

    Last updated: April, 03, 2008
    Page created: March 04, 2008
    Disclaimer Notice & Privacy Statement / Security Notice
    Send comments or suggestions to itsec@nist.gov
    NIST is an Agency of the U.S. Commerce Department's Technology Administration