SCAP (Security Content Automation Protocol) is a NIST standard for automated vulnerability/compliance checking using standardized formats (XCCDF for checklists, OVAL for vulnerability definitions).
SCAP enables automated compliance scanning against CIS Benchmarks and DISA STIGs. Tools: OpenSCAP, Nessus, RHEL Compliance. STIG (Security Technical Implementation Guide) = DoD-specific hardening checklists in SCAP format.