Skip to content

XCCDF - Extensible Configuration Checklist Description Format

As the name suggests, the language is used to describe the security checklists. The language is designed to support information interchange, document generation, organizational and situational tailoring, automated compliance testing, and compliance scoring.

info alert: This article is a stub.

Last modification was made about 1 year ago.

Key Data Entities

  • XCCDF Benchmark - XCCDF Benchmark is parent element of XCCDF Document
  • XCCDF Profile - The automated checklist that can be applied to a single endpoint.

Key Online Resources

  • XCCDF, Homepage at NIST [Online, 2024-04-03]
  • NIST 7275 Rev. 4, Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 [Published: March 2012]