...
Profiles are used to define the desired configuration of the managed computers, expressed in Security Content Automation Protocol (SCAP) termsstandard Extensible Configuration Checklist Document Format (XCCDF).
Getting SCAP Content
Before you can use profiles to manage your computers, you must first import them into the database. This can be done by either selecting them from the list of available ones on the Download Profiles page or importing them from your file system on the Importing Profiles page.
...