CCS lets you import the SCAP 1.2 data streams through the SCAP Benchmarks view of the console. The data streams like the United States Government Configuration Baseline (USGCB) standards, are used to assess and report on the system configurations of computers. The assets are evaluated against the imported SCAP 1.2 data streams, which you must download from the following Web site:
CCS supports evaluation of SCAP or OVAL content for Windows platform. If the imported SCAP or OVAL content contains rules or definitions for platforms other than Windows then evaluation is not supported.
A data stream ID and version represent every SCAP data stream that you import. The data stream ID and version are displayed in the SCAP Benchmarks view of the console.
CCS supports valid TIER IV SCAP 1.2 content including the following content that is published by NIST in the National Checklist Program (NCP) repository:
USGCB Internet Explorer 7 (2.0.x.0)
USGCB Internet Explorer 8 (1.2.x.0)
USGCB Windows 7 (1.2.x.0)
USGCB Windows 7 Firewall (1.2.x.0)
USGCB Windows Vista (2.0.x.0)
USGCB Windows Vista Firewall (2.0.x.0)
USGCB Windows XP Firewall (2.0.x.0)
USGCB Windows XP (2.0.x.0)
If the data stream already exists in CCS, then you can choose to overwrite the existing definitions. If the existing data stream is already evaluated then the overwrite operation does not affect the evaluation results. The SCAP evaluation job evaluates against the new data stream in the subsequent job runs.
The following classes of OVAL definitions (5.3 to 5.10.1) are supported in CCS: