Hello,

I hope I came to the right place and that I’m not making a fool of myself.

We are having internal discussions on how to compliance mapping of several 
regulations. I noticed that OpenSCAP has a lot of compliance requirements as 
references in the SCAP control activities. Is this a manual process; is 
OpenSCAP maintain this compliance mapping without any tools? Or is it 
completely automatic, and if so, how? I.e. how does OpenSCAP map certain 
regulation requirements to certain control activities?

If anyone has the answer, I’d be very grateful. Thanks.

Mvh/BR,

Tobias Svenblad
Security Analyst, Crosskey<https://www.crosskey.fi/>
_______________________________________________
Open-scap-list mailing list
Open-scap-list@redhat.com
https://www.redhat.com/mailman/listinfo/open-scap-list

Reply via email to