1 Automating Compliance Checking, Vulnerability Management, and Security Measurement Peter Mell and Stephen Quinn Computer Security Division NIST A DISA,