Extensible Configuration Checklist Description Format

This article relies excessively on references to primary sources. Please improve this article by adding secondary or tertiary sources. Find sources: "Extensible Configuration Checklist Description Format" – news · newspapers · books · scholar · JSTOR (August 2015) (Learn how and when to remove this message)

The Extensible Configuration Checklist Description Format (XCCDF) is an XML format specifying security checklists, benchmarks and configuration documentation.

XCCDF development is being pursued by NIST, the NSA, The MITRE Corporation, and the US Department of Homeland Security.^{[citation needed]}

XCCDF is intended to serve as a replacement for the security hardening and analysis documentation written in prose. XCCDF is used by the Security Content Automation Protocol.^[1]