Retina Network Security Scanner, the flagship solution component of Retina.GOV, supports the following SCAP requirements:

• Federal Desktop Core Configuration (FDCC) Scanner
• Authenticated Configuration Scanner
• Authenticated Vulnerability and Patch Scanner
• Unauthenticated Vulnerability Scanner

Retina’s SCAP capabilities include the following standards: XCCDF, OVAL, CCE, CPE, CVE and CVSS.

Utilizing Retina Network Security Scanner’s SCAP engine, users are able to import SCAP content, such as FDCC benchmarks, for interpretation and assessment of network devices. Retina provides an easy-to-use wizard that guides the user through the steps of selecting desired content, providing information on the assets to be evaluated, and launching the assessment scan. Upon launch, the scan will run without user intervention, alerting you when complete. The assessment results are made available in both machine legible XML in OVAL and XCCDF formats as well as human readable reports. Both machine and human readable output contains associated CVE, CPE, CVE and CVSS references as applicable.

eEye's Retina Network Security Scanner is compliant with FDCC 1.2.

The Federal Desktop Core Configuration (FDCC) is an OMB-mandated security configuration which exists for Microsoft Windows Vista and XP operating systems. The Windows Vista FDCC is based on DoD customization of the Microsoft Security Guides for both Windows Vista and Internet Explorer 7.0. Microsoft's Vista Security Guide reflects the consensus recommended settings produced through a collaborative effort amongst DISA, NSA, and NIST.

The Windows XP FDCC is based on Air Force customization of the Specialized Security-Limited Functionality (SSLF) recommendations in NIST SP 800-68 and DoD customization of the recommendations in Microsoft's Security Guide for Internet Explorer 7.0.

The DoD Information Assurance Certification and Accreditation Process (DIACAP) is the United States Department of Defense (DoD) process of ensuring that risk management is applied on information systems (IS).

DIACAP defines a DoD-wide formal and standard set of activities, general tasks and management structure process for the certification and accreditation (C&A) of a DoD IS that will maintain the information assurance (IA) posture throughout the system's life cycle.