Security Content Automation Protocol (SCAP) Compliance Checker Survey

Security Content Automation Protocol (SCAP) Compliance Checker (SCC) Survey 2022

OMB CONTROL NUMBER: 0704-0553

OMB EXPIRATION DATE: 05/31/2025

AGENCY DISCLOSURE NOTICE

The public reporting burden for this collection of information, 0704-0553, is estimated to average 5 minutes per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding the burden estimate or burden reduction suggestions to the Department of Defense, Washington Headquarters Services, at [email protected]. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number.

PRIVACY ACT STATEMENT

Authority to request this information is granted under 5 U.S.C. 301, Departmental Regulations; 10 U.S.C. 5031 and 5032.

PURPOSE: The purpose of this survey is to collect feedback from users of NIWC Atlantic’s SCAP Compliance Checker (SCC) Tool.
ROUTINE USES: The information provided in this survey will be analyzed and maintained by NIWC Atlantic and will be used by the Commanding Officer and his/her staff to make policy decisions that will best serve the Command, staff and customers.
CONFIDENTIALITY: All responses will be shared with select NIWC Atlantic personnel in order to be statistically summarized with the responses of others.
PARTICIPATION: Completion of this survey is entirely voluntary. Failure to respond to any of the questions will NOT result in any penalties except possible lack of representation of your views in the final results and outcomes. If you agree to participate, you may withdraw your participation in the survey at any time by simply exiting the survey. If you are not comfortable answering one of the survey questions, you are free to leave it blank.

• Which of the following do you support?

• Army

• Navy

• Air Force

• Marines

• Non-DOD US Federal Agency

• US State

• City/County

• Private industry (non-government use)

• What version(s) of SCC do you use? It is strongly suggested to run the latest version unless there are business requirements that prohibit it. We provide technical support to any version, but only updates to the latest release. (Select all that apply)

• 5.5

• 5.4.2

• 5.4.1

• 5.4

• How many total computers do you review with SCC (local or remotely scanned)?

• (Numeric Answer)

• Or how many total installations of SCC do you have?

• (Numeric Answer)

• What platforms do you use SCC on? (Select all that apply)

• Windows 10

• Windows 11

• Windows Server 2012

• Windows Server 2012 R2

• Windows Server 2016

• Windows Server 2019

• Windows Server 2022

• Oracle Linux 7

• Oracle Linux 8

• Red Hat Enterprise Linux 6

• Red Hat Enterprise Linux 7

• Red Hat Enterprise Linux 8 (x64)

• Red Hat Enterprise Linux 8 (aarch64)

• Solaris 10 (x86)

• Solaris 10 (SPARC)

• Solaris 11 (x86)

• Solaris 11 (SPARC)

• MacOS 10.15

• MacOS 11

• Ubuntu Linux 16.04

• Ubuntu Linux 18.04

• Ubuntu Linux 20.04 (amd64)

• Ubuntu Linux 20.04 (arm64)

• SUSE Linux 12

• SUSE Linux 15

• Raspberry Pi OS (32 bit)

• Raspberry Pi OS (arm64)

• How frequently do you use SCC?

• Daily

• Weekly

• Monthly

• Quarterly

• Annually

• Rarely

• Ad-hoc

• How long have you been using SCC?

• 0-6 months

• 6-12 months

• 1-2 years

• 2+ years

• 5+ years

• Which of the following scanning modes do you use? (Check all that apply)

• Local scan (UNIX and Windows)

• Windows Remote Scanning (WMI)

• Windows Remote Scanning (Classic)

• UNIX SSH Remote Scanning

• Cisco IOS Offline Scanning

• Cisco IOS SSH Remote Scanning

• Do you use any of the following lesser known features of SCC? (Check all that apply)

• Transferring of results via SSH (Secure Shell)

• SCC as a Service (Windows only)

• Post scan summary reports

• Please rate your satisfaction with the Graphical User Interface (SCC version 5.4 and later)

• Very Satisfied

• Satisfied

• Neutral

• Unsatisfied

• Very Unsatisfied

• Not Applicable (Use Command Line Only)

• Please rate your satisfaction with the Command Line Interface (SCC version 5.4 and later)

• Very Satisfied

• Satisfied

• Neutral

• Unsatisfied

• Very Unsatisfied

• Not Applicable (Use Graphical User Interface (GUI) Only)

• Do you automate usage of SCC via command line scripting (cron jobs, task scheduler etc...), or bundle SCC as part of your own application?

• Please rate your overall satisfaction with the SCC application.

• Very Satisfied

• Satisfied

• Neutral

• Unsatisfied

• Very Unsatisfied

• Have you needed to contact our team for technical support? ([email protected]) If so, what was your satisfaction with the support?

• Very Satisfied

• Satisfied

• Unsatisfied

• Very Unsatisfied

• Not Applicable

• Have you registered with [email protected] for update notifications?

• Would you like to be a Beta tester of a future release of SCC? If so, please provide your email address

• (small text field)

• How can we improve the SCC application? If you would like to be contacted with a response, please include your email address. Do not enter any sensitive data in this field. Caveats:

  0. a. The SCC development team is not tasked with writing Security Content Automation Protocol (SCAP) content for Security Technical Information Guides (STIGs), or creating STIGs in general, so any STIG/SCAP content suggestions should be sent to Defense Information System Agency (DISA) [email protected].

b. The SCC development team is not tasked with any development/support of the STIG Viewer, any suggestions should be send to DISA: [email protected]

• (Large text field)