Security Content Automation Protocol
The Security Content Automation Protocol is a method for using specific standards to enable the automated vulnerability management, measurement, and policy compliance evaluation of systems deployed in an organization, including e.g., FISMA compliance. The National Vulnerability Database is the U.S. government content repository for SCAP. To guard against security threats, organizations need to continuously monitor the computer systems and applications they have deployed, incorporate security upgrades to software and deploy updates to configurations. Applications which conduct security monitoring use the standards when measuring systems to find vulnerabilities, and offer methods to score those findings in order to evaluate the possible impact.
The SCAP suite of specifications standardize the nomenclature and formats used by these automated vulnerability management, measurement, and policy compliance products. A vendor of a computer system configuration scanner can get their product validated against SCAP, demonstrating that it will interoperate with other scanners and express the scan results in a standardized way. Security Content Automation Protocol checklists standardize and enable automation of the linkage between computer security configurations and the NIST Special Publication 800-53 controls framework. Future versions will likely standardize and enable automation for implementing and changing security settings of corresponding SP 800-53 controls. Accordingly, SCAP forms an integral part of the NIST FISMA implementation project.
The SCAP Validation Program tests the ability of products to employ SCAP standards. The NIST National Voluntary Laboratory Accreditation Program accredits independent laboratories under the program to perform SCAP validations. A vendor seeking validation of a product can contact an NVLAP accredited SCAP validation laboratory for assistance in the validation process. A customer who is subject to the FISMA requirements, or wants to use security products that have been tested and validated to the SCAP standard by an independent third party laboratory, should visit the SCAP validated products web page to verify the status of the product(s) being considered.
DCL/IHS Markit Transforms Customer Experience… Content Automation
Though each client faces unique business challenges, they all have one thing in common: Content is absolutely critical to their success. The leading source of market research for a number of industries from aerospace and defense to energy and economics, faced a content challenge that is common across enterprise companies. In the case of IHS Markit the need to consolidate legacy content creation and management systems went hand in hand with the bigger business goal of improving customer satisfaction. The organization needed a single content platform that would allow customers to access industry coverage easily across all research categories and across all research teams. IHS Markit shared with us that at one point in time every piece of their critical content was in a different place.
They needed to do a complete overhaul of their content systems so all content produced globally would look the same, under the same brand, tagged with the same taxonomy, and structured to be available to clients in a consistent way. Provide structured authoring in a format-neutral way to support multi-channel content delivery to the Web, PDF, mobile, and any future formats. Improve the discoverability of content through the use of metadata and taxonomies. A key criteria for content automation is that it allows non-technical subject matter experts to author structured content components in an environment with which they are accustomed so that, in the case of IHS Markit, market analysts can focus on their research and not worry about all the manual, error-prone, and time-consuming tasks that traditional content management solutions require. Today, with content automation, IHS Markit allows their clients around the world to access research reports and analysis through a single portal where they can search by keyword or phrase across every category of research.
As IHS Markit said, ultimately the migration to a single content platform was less about productivity and cost savings and more about customer experience and driving business transformation. Gavin Drake is Vice President of Marketing for Quark Enterprise Solutions where he drives the adoption of content platforms that leverage automation to improve every stage of the content lifecycle.
The automation myth
Sen. Marco Rubio said that the central challenge of our times is “To ensure that the rise of the machines is not the fall of the worker.” A cover story in the Atlantic asked us to ponder the problems of a world without work. Automatic telephone switches put operators out of work. In 1950, the average employed person in the United States worked about 1,909 hours. Or of going from working 9 to 5 every day to working 9:30 to 5 every day.
The American economy has grown, but largely by adding workers rather than by workers equipping themselves with powerful new machines to multiply their capabilities. The number of hours worked per worker has stayed relatively flat, even while other countries have continued to enhance their leisure. If robots were taking our jobs, the productivity of the workers who still have jobs – the total amount of work that gets done divided by the total number of people who are employed – would be going up rapidly. These days people are perhaps more likely to book a reservation or order a takeout meal with an app rather than a phone call, but the core work of serving and preparing food has seen very little progress. Rather than hot business trends relating to new equipment that allows workers to deliver more value than ever before, one of the signal trends of our time has been a proliferation of online services that reduce the friction associated with having people get in their car and bring you things.
The way modern digital technology blurs the lines between entertainment devices and productivity devices in some ways works to undermine the productivity of the modern office worker. The problem with trying to envision “a world without work” is that it asks us to envision an unrealistically large change. In a world of more productivity and less work, instead of doing that, we might move it back down to 65. We could give college students more generous grants so more of them could focus full-time on their studies rather than dual-tracking school with work. 44 percent of mothers with full-time jobs say they would rather work part time. The real threat is precisely the opposite – that the per-hour productivity of the American worker won’t increase at a more rapid rate.