https://www.open-scap.org/features/
OpenSCAP Machine-readable descriptions of the rules your infrastructure must conform to.
it's notes
“Tell me and I forget, teach me and I may remember, involve me and I learn.” ― Benjamin Franklin.