Sacm Workgroup RFCs
Browse Sacm Workgroup RFCs by Number
- RFC7632 - Endpoint Security Posture Assessment: Enterprise Use Cases
- This memo documents a sampling of use cases for securely aggregating configuration and operational data and evaluating that data to determine an organization's security posture. From these operational use cases, we can derive common functional capabilities and requirements to guide development of vendor-neutral, interoperable standards for aggregating and evaluating data relevant to security posture.
- RFC8248 - Security Automation and Continuous Monitoring (SACM) Requirements
- This document defines the scope and set of requirements for the Security Automation and Continuous Monitoring (SACM) architecture, data model, and transfer protocols. The requirements and scope are based on the agreed-upon use cases described in RFC 7632.
- RFC8412 - Software Inventory Message and Attributes (SWIMA) for PA-TNC
- This document extends "PA-TNC: A Posture Attribute (PA) Protocol Compatible with Trusted Network Connect (TNC)" (RFC 5792) by providing specific attributes and message exchanges to allow endpoints to report their installed software inventory information to a NEA Server, as defined in "Network Endpoint Assessment (NEA): Overview and Requirements" (RFC 5209).
