NIST SCAP, protocol and standard to ease data gathering for security management,  risk management, and compliance measurement.