SSG M1 Objectives

Jeffrey Blank blank at eclipse.ncsc.mil
Mon Mar 19 17:50:51 UTC 2012




>> If there is a section in the SNAC guide that is instructive but which
>> cannot possibly have an OVAL check (such as for BIOS settings), just
>> put the information into an XCCDF Group. Later, we can create OCIL
>> content to handle things that will absolutely require manual
>> inspection (or relate to policy/procedures).
> There is a down side to this in that we can't attach ident/ref's to
> groups. We could always just list the controls in the description for
> these but it seems very kludgy. Putting rules in for these and making do
> with the unknown in the results would probably serve us better in the
> long run. Any and all unknown results should be reviewed manually anyway.


You're right.  These should probably be things which are Rules, but 
which are really awaiting OCIL checks.  I'd forgotten to mention that 
that's where we really want to go.



More information about the scap-security-guide mailing list