Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Specification for the Open Checklist Interactive Language (OCIL) Version 2.0



David A. Waltermire, Karen Scarfone, Maria Casipe


This report defines version 2.0 of the Open Checklist Interactive Language (OCIL). The intent of OCIL is to provide a standardized basis for expressing questionnaires and related information, such as answers to questions and final questionnaire results, so that the questionnaires can use a standardized, machine-readable approach to interacting with humans and using information stored during previous data collection efforts. OCIL documents are Extensible Markup Language (XML) based. This report defines and explains the requirements that IT products and OCIL documents asserting conformance with the OCIL 2.0 specification must meet.
NIST Interagency/Internal Report (NISTIR) - 7692
Report Number


assessment, OCIL, Open Checklist Interactive Language, questionnaire, SCAP, security automation, Security Content Automation Protocol, XML


Waltermire, D. , Scarfone, K. and Casipe, M. (2011), Specification for the Open Checklist Interactive Language (OCIL) Version 2.0, NIST Interagency/Internal Report (NISTIR), National Institute of Standards and Technology, Gaithersburg, MD, [online], (Accessed May 20, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created April 7, 2011, Updated November 10, 2018