As part of the national institute of standards and technology (nist) program, the security content automation protocol (scap) identifies standards and protocol implemented to establish a range of different automated compliance tools and scanners. one of the different tools available is the which deploys a privileged account to authenticate on the target system, and it eventually scans the system to ascertain compliance with an identified set of configuration requirements.