Be aware, that you need to already have downloaded the package you want to use, for example from the [ NVD (National Vulnerability Database) of the NIST (National Institute of Standards and Technology)| website, before you can define a SCAP job. It would even be easier, if you had not only downloaded but already imported it into CM, however, this is not mandatory, it can also be done during the SCAP job wizard.