Reminder - as announced in October 2011, FDCC and USGCB content have been versioned to SCAP 1.2 to increase the number of automatically-checked configuration settings, improve the accuracy of configuration setting and patch application scanning, and to keep pace with technology as dictated by vendor progression in operating system and application technologies. On December 31, 2013, support for USGCB content based on SCAP 1.0 expired and maintenance (including monthly patch updates for SCAP 1.0 content) has been discontinued. While authors of SCAP content/checklists may continue to produce and maintain SCAP 1.0 and 1.1 versioned content according to their technology requirements and follow the recommended least version principle for the SCAP content described in SCAP Content Conventions, United States government agencies should not use expired USGCB/FDCC content. Information is available in questions 26 through 36 of the USGCB Frequently Asked Question page. Question 26 describes the current releases of SCAP content. Questions 29 through 31 describe the end of maintenance of the SCAP 1.0 content, including monthly USGCB patch updates. Questions 32 through 34 provide additional guidance to federal agencies regarding USGCB, and Questions 35 and 36 provide information about migration to SCAP 1.2.

discovered 11 months ago




See all items from the same source