Waltermire, D.
, Schmidt, C.
, Scarfone, K.
and Ziring, N.
(2011),
Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.IR.7275r4
(Accessed December 7, 2024)
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock (
) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2
Published
Author(s)
, Chalres Schmidt, Karen Scarfone, Neal Ziring
Abstract
This report specifies the data model and Extensible Markup Language (XML) representation for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2. An XCCDF document is a structured collection of security configuration rules for some set of target systems. The XCCDF specification is designed to support information interchange, document generation, organizational and situational tailoring, automated compliance testing, and scoring. The specification also defines a data model and format for storing results of security guidance or checklist testing. The intent of XCCDF is to provide a uniform foundation for expression of security checklists and other configuration guidance, and thereby foster more widespread application of good security practices.Citation
NIST Interagency/Internal Report (NISTIR) - 7275rev4
Report Number
7275rev4
NIST Pub Series
Pub Type
NIST Pubs
Download Paper
Keywords
benchmarks, checklists, eXtensible Configuration Checklist Description Format, FISMA, security controls, vulnerabilities, XCCDF
Citation
Issues
If you have any questions about this publication or are having problems accessing it, please contact reflib@nist.gov.
Created September 30, 2011, Updated June 9, 2020