The Security Content Automation Protocol (SCAP) can help take guesswork out of secure system configurations.