Article · Wikipedia archive · Last revised May 31, 2026

Extensible Configuration Checklist Description Format

The Extensible Configuration Checklist Description Format (XCCDF) is an XML format specifying security checklists, benchmarks and configuration documentation.

Last revised
May 31, 2026
Read time
≈ 1 min
Length
109 w
Citations
1
Source

The Extensible Configuration Checklist Description Format (XCCDF) is an XML format specifying security checklists, benchmarks and configuration documentation.

XCCDF development is being pursued by NIST, the NSA, The MITRE Corporation, and the US Department of Homeland Security.

XCCDF is intended to serve as a replacement for the security hardening and analysis documentation written in prose. XCCDF is used by the Security Content Automation Protocol.1

References

References

  1. Waltermire, David; Schmidt, Charles; Scarfone, Karen; Ziring, Neal (March 2012). "Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2" (PDF).
External links