An official website of the United States government
Here's how you know
A .mil website belongs to an official U.S. Department of Defense organization in the United States.
A lock (lock ) or https:// means you’ve safely connected to the .mil website. Share sensitive information only on official, secure websites.

NIWC Atlantic < TechnologySCAP < SCAP Content Repository

SCAP Content Repository

Last Updated: 4/2/2024

NIWC Repository Statistics (102kb, pdf) - Download

DISA SCAP Consolidated Files
  • DISA_SCAP_Q1_2024_Consolidated.zip (5.5mb, zip) - Download

If you encounter any issues downloading these files, contact us.

SCC Logo and outlined shield with a checkmark in the center

NIWC Developed SCAP Content

NIWC Atlantic has developed the following SCAP Content Benchmarks based on publicly available DISA STIG Manuals, located at https://public.cyber.mil/stigs/downloads/

Date Title STIG Manual Ver SCAP BMark Ver
2/1/2024 Microsoft IIS 10.0 Server STIG SCAP Benchmark  2.10 2.10.7
2/1/2024 Microsoft IIS 10.0 Site STIG SCAP Benchmark 2.9 2.9.7
10/26/2023 Microsoft IIS 8.5 Server STIG SCAP Benchmark 2.7 2.7.5
10/26/2023 Microsoft IIS 8.5 Site STIG SCAP Benchmark 2.9 2.9.5
10/26/2023 Microsoft Office 365 STIG SCAP Benchmark 2.11 2.11.5
8/4/2023 Microsoft OneDrive STIG SCAP Benchmark 2.3 2.3.4
4/1/2024 MS SQL Server 2016 Database STIG SCAP Benchmark
Requires SCC 5.9 or later
2.8 2.8.1
4/1/2024 MS SQL Server 2016 Instance STIG SCAP Benchmark
Requires SCC 5.9 or later
2.11 2.11.1

DISA SCAP Content Enhanced Version

NIWC Atlantic has created enhanced SCAP Content containing a combination of automated and manual tests based on DISA Developed STIG Manual’s and DISA developed SCAP Benchmark obtained from https://public.cyber.mil/stigs/downloads/ and https://public.cyber.mil/stigs/scap/.

DISA SCAP Content Enhanced Version - With Additional Automation

NIWC Atlantic has created enhanced SCAP Content containing a combination of automated and manual tests based on DISA Developed STIG Manual’s and DISA developed SCAP Benchmark obtained from https://public.cyber.mil/stigs/downloads/ and https://public.cyber.mil/stigs/scap/.  These files have additional automation beyond those available from DISA.  NIWC will continue to expand this list, and the number of items automated per content file.

Guidance-Card-Icon Dept-Exclusive-Card-Icon