SCM can also create baselines in the Security Content Automation Protocol (SCAP) XML-based format, managed by the National Institute of Standards and Technology (NIST).

The National Institute of Standards and Technology (NIST) has revised its testing requirements for security products that use the security Content Automation Protocol (SCAP).

Unfortunately, SSH automation is not mentioned, and neither is the IMAP protocol.