RE: [EXTERNAL] Questions about OSCAP for NIST Compliance checking