FDCC

The Federal Desktop Core Configuration standard (FDCC) is intended to improve computer security within the federal government by mandating configuration and security setting standards for federal agency desktops, and requiring agencies to monitor and report on compliance.

The means to enforce and report on FDCC compliance is through use of SCAP (Security Content Automation Protocol) validated tools and solutions. SCAP is a set of technologies and standards developed under the auspices of the National Institute of Standards and Technology (NIST). SCAP consists of a series of components that supply a common set to describe, document and report security vulnerabilities, and a set of capabilities such as an FDCC Scanner, that implement these standards to provide core functionality.

Part of the SCAP initiative is a rigorous independent validation program similar to Common Criteria where accredited Labs are used to validate requirements. EventTracker is fully certified.

EventTracker provides full FDCC Scanner capability.