Facebook Google Plus Twitter LinkedIn YouTube RSS Menu Search Resource - BlogResource - WebinarResource - ReportResource - Eventicons_066 icons_067icons_068icons_069icons_070

Tenable Engages SAIC to Perform NIST SCAP FDCC Certification

February 14, 2008

Columbia, MD

Tenable Security Center 3.2 Management suite to be certified for NIST SCAP FDCC certification

Tenable Network Security, Inc., a leading developer of security management solutions and creator of the popular and award-winning Nessus 3 vulnerability scanner, announced today that it has engaged SAIC to perform Security Content Automation (SCAP) FDCC Compliance Testing for Tenable’s Security Center 3.2 Product suite for the Microsoft XP and Vista platforms.  The basis of the validation testing will be the U.S. National Institute of Standards and Technology (NIST) defined and generated data feeds of content in the SCAP standards. 

The Security Content Automation Protocol (SCAP), pronounced “Ess-Cap”, is a method for using specific standards to enable automated vulnerability management, measurement, and policy compliance evaluation (e.g., FISMA compliance). More specifically, SCAP is a suite of open standards that enumerates software flaws, security related configuration issues, and product names, measures systems to determine the presence of vulnerabilities, and provides mechanisms to rank (score) the results of these measurements in order to evaluate the impact of the discovered security issues. SCAP defines how these standards are used in unison to accomplish these capabilities. 

Furthermore, the Federal Desktop Core Configuration (FDCC) is an OMB-mandated security configuration. The FDCC currently exists for Microsoft Windows Vista and XP operating system software. The "Federal Desktop Core Configuration" was originally called for in a 22 March 2007 memorandum from OMB to all Federal agencies and department heads and a corresponding memorandum from OMB to all Federal agency and department Chief Information Officers (CIO).

“SCAP FDCC compliance certification is important because it provides independent, standards-based verification of the security functions delivered by the Tenable Security Center and related components,” said Ron Gula, CEO of Tenable. “Tenable is pleased to undergo this testing with SAIC to provide our current and future customers the highest level of confidence that our solutions deliver on their security promises. As a side benefit, it also allows Tenable to assist our clients with their most current auditing needs”.

About Tenable

Tenable®, Inc. is the Cyber Exposure company. Over 24,000 organizations around the globe rely on Tenable to understand and reduce cyber risk. As the creator of Nessus®, Tenable extended its expertise in vulnerabilities to deliver Tenable.io®, the world’s first platform to see and secure any digital asset on any computing platform. Tenable customers include 53 percent of the Fortune 500, 29 percent of the Global 2000 and large government agencies. Learn more at tenable.com.

Contact Information:

Cayla Baker
[email protected]
(443) 539-6476

Stay up to date!

Subscribe to our email alerts for new press releases.

Subscribe for press release updates

Try for Free Buy Now

Try Tenable.io Vulnerability Management


Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Sign up now and run your first scan within 60 seconds.

Buy Tenable.io Vulnerability Management

Enjoy full access to a modern, cloud-based vulnerability management platform that enables you to see and track all of your assets with unmatched accuracy. Purchase your annual subscription today.

65 assets

Try Nessus Professional Free


Nessus® is the most comprehensive vulnerability scanner on the market today. Nessus Professional will help automate the vulnerability scanning process, save time in your compliance cycles and allow you to engage your IT team.