Scoring audits

When McAfee Policy Auditor performs an audit on a system, it generates information about system compliance that includes a compliance score.

The software supports the four scoring models described in the National Institute of Standards and Technology (NIST) document Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 (http://csrc.nist.gov/publications/nistir/ir7275-rev4/NISTIR-7275r4.pdf):

  • Default scoring model
  • Flat unweighted scoring model
  • Flat scoring model
  • Absolute scoring model

The software is preconfigured to use a normalized implementation of the flat unweighted scoring model. You can change the scoring model and the software recalculates scores to reflect the change.