Specification for the Extensible Configuration Checklist ...

NIST Interagency Report 7275
Revision 3
Specification for the
Extensible Configuration
Checklist Description Format
(XCCDF) Version 1.1.4
Neal Ziring
Stephen D. Quinn






NIST Interagency Report 7275 Specification for the Extensible Revision 3
Configuration Checklist
Description Format (XCCDF)
Version 1.1.4

Neal Ziring
Stephen D. Quinn
C O M P U T E R S E C U R I T Y
Computer Security Division
Information Technology Laboratory
National Institute of Standards and Technology
Gaithersburg, MD 20899-8930

January 2008



U.S. Department of Commerce
Carlos M. Gutierrez, Secretary
National Institute of Standards and Technology
James M. Turner, Acting Director SPECIFICATION FOR THE EXTENSIBLE CONFIGURATION CHECKLIST DESCRIPTION FORMAT (XCCDF) VERSION 1.1.4

Reports on Computer Systems Technology

The Information Technology Laboratory (ITL) at the National Institute of Standards and Technology
(NIST) promotes the U.S. economy and public welfare by providing technical leadership for the nation’s
measurement and standards infrastructure. ITL develops tests, test methods, reference data, proof of
concept implementations, and technical analysis to advance the development and productive use of
information technology. ITL’s responsibilities include the development of technical, physical,
administrative, and management standards and guidelines for the cost-effective security and privacy of
sensitive unclassified ...