Reminder - as announced in October 2011, FDCC and USGCB content have been
versioned to SCAP 1.2 to increase the number of automatically-checked
configuration settings, improve the accuracy of configuration setting and patch
application scanning, and to keep pace with technology as dictated by vendor
progression in operating system and application technologies. On December 31,
2013, support for USGCB content based on SCAP 1.0 expired and maintenance
(including monthly patch updates for SCAP 1.0 content) has been discontinued.
While authors of SCAP content/checklists may continue to produce and maintain
SCAP 1.0 and 1.1 versioned content according to their technology requirements
and follow the recommended least version principle for the SCAP content
described in SCAP Content Conventions, United States government agencies should
not use expired USGCB/FDCC content. Information is available in
questions 26 through
36 of the USGCB Frequently Asked Question page.
Question
26 describes the current releases of SCAP content.
Questions
29 through 31 describe the end of maintenance of the SCAP 1.0 content,
including monthly USGCB patch updates.
Questions
32 through 34 provide additional guidance to federal agencies regarding
USGCB, and
Questions
35 and 36 provide information about migration to SCAP 1.2.