[BESAdmin-Announcements] Announcing BigFix Compliance SCAP 1.3 Release
Announcements for BES Administrators
besadmin-announcements at bigmail.bigfix.com
Wed Oct 29 09:28:29 PDT 2025
Hello BigFix Community,
We are excited to announce the release of BigFix Compliance SCAP 1.3, which
includes enhancements across the SCAP Tool, SCAP 1.3 Wizard, and ARF
Reporting components. It is now available for all BigFix Compliance license
holders.
<https://forum.bigfix.com/t/announcing-bigfix-compliance-scap-1-3-release/53063#p-175073-overview-1>
Overview
BigFix Compliance has successfully achieved SCAP 1.3 Certification under
the NIST SCAP Validation Program (Validation Number 148). This
certification aligns BigFix with the latest NIST specifications and ensures
continued compliance with federal and industry security automation
standards.
View our certification here: NIST SCAP CERTIFICATION
<https://csrc.nist.gov/projects/scap-validation-program/validated-products-and-modules/148-hcl-scap-1-3-product-validation-record>
<https://forum.bigfix.com/t/announcing-bigfix-compliance-scap-1-3-release/53063#p-175073-new-components-and-features-2>New
Components and Features
<https://forum.bigfix.com/t/announcing-bigfix-compliance-scap-1-3-release/53063#p-175073-scap-13-tool-3>SCAP
1.3 Tool
- Built on a modernized Python-based architecture for faster and more
reliable parsing of XCCDF, OVAL, and CPE files.
- Supports importing both CIS and DISA STIG benchmarks for Windows 10
and 11 and RHEL 8 and 9 operating systems.
- Integrated Relevance Library and Relevance Generator for dynamic
Fixlet creation.
- Produces standardized ARF (Asset Reporting Format) outputs for
certification and reporting compliance.
- Provides complete accuracy and validation against SCAP 1.3 schemas and
NIST benchmarks.
<https://forum.bigfix.com/t/announcing-bigfix-compliance-scap-1-3-release/53063#p-175073-scap-13-wizard-4>SCAP
1.3 Wizard
- Enhanced wizard interface now supports importing and executing SCAP
1.3 content directly from the BigFix Console.
- Process CIS and DISA content structures.
- Streamlined benchmark and datastream selection workflow.
<https://forum.bigfix.com/t/announcing-bigfix-compliance-scap-1-3-release/53063#p-175073-arf-reporting-integration-5>ARF
Reporting Integration
- Generates SCAP-compliant ARF XML reports summarizing compliance
results across multiple systems.
- Enables centralized compliance visibility by aggregating rule results
per asset.
- Ensures interoperability with NIST tools, compliance dashboards, and
external validation frameworks.
- Improves traceability and auditing through embedded benchmark
metadata, evaluator details, and timestamps.
- Seamlessly integrates with BigFix Web Reports for SCAP result
visualization.
<https://forum.bigfix.com/t/announcing-bigfix-compliance-scap-1-3-release/53063#p-175073-site-versions-6>Site
Versions
Type Name Version
SCAP Tool BigFix Compliance SCAP Content v1.0.0
WebUI Site SCM Reporting (New SCAP Tool) Site version: 162
ARF Report ARF Report Generator Site version: 162
Version: 1.0.0
Console Component SCAP 1.3 Wizard Site version: 162
<https://forum.bigfix.com/t/announcing-bigfix-compliance-scap-1-3-release/53063#p-175073-prerequisites-7>
Prerequisites
Component Supported Versions
BigFix Platform (Core) v11.0 or later
Web Reports BigFix 11.0 Web Reports module
<https://forum.bigfix.com/t/announcing-bigfix-compliance-scap-1-3-release/53063#p-175073-documentation-8>
Documentation
For detailed instructions on importing and using SCAP 1.3 content,
refer to Importing
SCAP content
<https://help.hcl-software.com/bigfix/11.0/compliance/Compliance/SCM_Users_Guide/c_importing_scap_content.html>
.
<https://forum.bigfix.com/t/announcing-bigfix-compliance-scap-1-3-release/53063#p-175073-conclusion-9>
Conclusion
If you have any questions or comments, please feel free to reach out or
respond here. Thank you!
Sincerely,
Jordan Warsoff *(he/him)*
BigFix Lead Product Manager
Mob: (801) 694-4658
[image: signature_2709624078]
hcl-software.com <https://www.hcl-software.com/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://bigmail.bigfix.com/pipermail/besadmin-announcements/attachments/20251029/9c5f80a7/attachment.html>
More information about the Besadmin-announcements
mailing list