System Security Profiles with OpenSCAP

SCAP stands for Security Content Automation Protocol, a standardized way to check, verify, and report vulnerability assessment and policy assessment. Red Hat Enterprise Linux (RHEL) 9 includes the OpenSCAP tool and profiles to audit and manage the security of systems. This helps ensure the systems you are managing comply with standard security policies such as the Payment Card Industry Data Security Standard (PCI DSS) or the Protection Profile for General Purpose Operating Systems—or Operating System Protection Profile (OSPP) for short—as well as discovering vulnerabilities. New security profiles, such as the Health Insurance Portability and Accountability Act (HIPAA) security profile, have been added to RHEL 9 to cover systems containing personal health information.

RHEL 9 includes this tool to review security profiles in order to discover possible attack vectors (misconfigurations or vulnerabilities) and can obtain guidance...