SCM is now retired and no longer supported. It has been replaced by the Security Compliance Toolkit (SCT)