OVAL Developers, Does anyone have an example of a SCAP 1.2 data-stream-collection that contains a <Tailoring> component? I'd like to verify that my structure is correct. Has anyone encountered the use of a <Tailoring> within the collection file? I appreciate any assists; Cheers, -Bill M. Bill Munyan Technical Product Executive; Security Controls & Automation 31 Tech Valley Drive East Greenbush, NY 12061 william.munyan@cisecurity.org<mailto:william.munyan@cisecurity.org> 518 880-0690 518 466-1160 (cell) [CIS_WEB_Logo_Type_RGB_Flat]<https://www.cisecurity.org/> [CIS Email Icons 01_23-02] <https://www.facebook.com/CenterforIntSec> [CIS Email Icons 01_23-03] <https://twitter.com/CISecurity> [CIS Email Icons 01_23-04] <https://www.youtube.com/user/TheCISecurity> [CIS Email Icons 01_23-05] <https://www.linkedin.com/company/the-center-for-internet-security> This message and attachments may contain confidential information. If it appears that this message was sent to you by mistake, any retention, dissemination, distribution or copying of this message and attachments is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments.

Bill, This is a requirement for SCAP 1.2 validation so you can find examples in the 1.2 validation bundle.  I'm not in a place to look at the actual requirement category, but there are a couple of variations on this requirement in that bundle -- external tailoring file, data stream with included tailoring profile, etc. --gun On 4/2/2018 6:59 AM, William Munyan wrote: > OVAL Developers, > Does anyone have an example of a SCAP 1.2 data-stream-collection that contains a <Tailoring> component? I'd like to verify that my structure is correct. > > Has anyone encountered the use of a <Tailoring> within the collection file? > > I appreciate any assists; Cheers, > -Bill M. > > > Bill Munyan > Technical Product Executive; Security Controls & Automation > 31 Tech Valley Drive > East Greenbush, NY 12061 > > william.munyan@cisecurity.org<mailto:william.munyan@cisecurity.org> > 518 880-0690 > 518 466-1160 (cell) > [CIS_WEB_Logo_Type_RGB_Flat]<https://www.cisecurity.org/> > [CIS Email Icons 01_23-02] <https://protect-us.mimecast.com/s/1XmkCQWKYZuLG1nsxrOm1?domain=facebook.com> [CIS Email Icons 01_23-03] <https://protect-us.mimecast.com/s/9xCJCR6KZ2HX9DwCNyaF5?domain=twitter.com> [CIS Email Icons 01_23-04] <https://protect-us.mimecast.com/s/H2vUCVO24gH8rnVtypuiM?domain=youtube.com> [CIS Email Icons 01_23-05] <https://protect-us.mimecast.com/s/OeskCW6K5kH87L1tn-dmm?domain=linkedin.com> > > > This message and attachments may contain confidential information. If it appears that this message was sent to you by mistake, any retention, dissemination, distribution or copying of this message and attachments is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments. > > > > _______________________________________________ > OVAL_Developer mailing list > OVAL_Developer@lists.cisecurity.org > http://lists.cisecurity.org/mailman/listinfo/oval_developer_lists.cisecurity.org

Hello Bill, Please take a look to the R3005 content under the requirements folder (https://protect-us.mimecast.com/s/uN3lCNkKVQtpK7LTmcSIv?domain=csrc.nist.gov). Please let me know if you have any questions. Respectfully, Dragos Prisaca > On Apr 2, 2018, at 2:14 PM, Gunnar Engelbach <gunnar.engelbach@threatguard.com> wrote: > > > Bill, > > This is a requirement for SCAP 1.2 validation so you can find examples in the 1.2 validation bundle. I'm not in a place to look at the actual requirement category, but there are a couple of variations on this requirement in that bundle -- external tailoring file, data stream with included tailoring profile, etc. > > > --gun > > > >> On 4/2/2018 6:59 AM, William Munyan wrote: >> OVAL Developers, >> Does anyone have an example of a SCAP 1.2 data-stream-collection that contains a <Tailoring> component? I'd like to verify that my structure is correct. >> >> Has anyone encountered the use of a <Tailoring> within the collection file? >> >> I appreciate any assists; Cheers, >> -Bill M. >> >> >> Bill Munyan >> Technical Product Executive; Security Controls & Automation >> 31 Tech Valley Drive >> East Greenbush, NY 12061 >> >> william.munyan@cisecurity.org<mailto:william.munyan@cisecurity.org> >> 518 880-0690 >> 518 466-1160 (cell) >> [CIS_WEB_Logo_Type_RGB_Flat]<https://www.cisecurity.org/> >> [CIS Email Icons 01_23-02] <https://protect-us.mimecast.com/s/-8E-COYXWVUkVnYCv5VXr?domain=facebook.com> [CIS Email Icons 01_23-03] <https://protect-us.mimecast.com/s/h57qCPNK0XtnYWgh1IjAF?domain=twitter.com> [CIS Email Icons 01_23-04] <https://protect-us.mimecast.com/s/YSSACQWKYZuLGOVukgn6m?domain=youtube.com> [CIS Email Icons 01_23-05] <https://protect-us.mimecast.com/s/uglwCR6KZ2HX9EYsqywOw?domain=linkedin.com> >> >> >> This message and attachments may contain confidential information. If it appears that this message was sent to you by mistake, any retention, dissemination, distribution or copying of this message and attachments is strictly prohibited. Please notify the sender immediately and permanently delete the message and any attachments. >> >> >> >> _______________________________________________ >> OVAL_Developer mailing list >> OVAL_Developer@lists.cisecurity.org >> http://lists.cisecurity.org/mailman/listinfo/oval_developer_lists.cisecurity.org > > _______________________________________________ > OVAL_Developer mailing list > OVAL_Developer@lists.cisecurity.org > http://lists.cisecurity.org/mailman/listinfo/oval_developer_lists.cisecurity.org