Set Up SCAP Policies
You need a Security Content Automation Protocol (SCAP) policy to evaluate hosts for SCAP compliance. Each time you launch a SCAP scan you can select a policy that you want to test against.
Learn more
Statement of SCAP Implementation