ALERT

[FREE DEMO] Deploy Your Enterprise Cloud in Minutes

Extensible Configuration Checklist Description Format (XCCDF)

Definition - What does Extensible Configuration Checklist Description Format (XCCDF) mean?

Extensible Configuration Checklist Description Format (XCCDF) is an XML format used to specify security checklists, configuration documentation and benchmarks, and was intended to support interchange of information, organizational and situational tailoring, document generation, compliance scoring and compliance testing. It is used as a unified standard so that the above documents and configuration settings and files can be interchangeable, allowing for easy customization and replacement.

Techopedia explains Extensible Configuration Checklist Description Format (XCCDF)

The Extensible Configuration Checklist Description Format was developed by the National Institute of Standards and Technology (NIST) as it was tasked to develop a checklist that would set forth option selections and settings that minimize the security risks inherent with the computer hardware and software systems that the federal government is likely to use.

The XCCDF represents a structured collection of security configuration rules meant for specific systems and the specification itself was designed specifically for information interchange, the generation of related documents, automated compliance testing (especially in relation to security), compliance testing and compliance scoring. It also defines the format and data model used for storing the results of the benchmark compliance testing. Its main purpose is the creation of a uniform foundation for expressing benchmarks, security checklists and other configuration guidance, and as a direct result fosters the widespread adoption of good security practices.

XCCDF documents use the XML format and can therefore be validated or tested using an XML schema-validating parser.

Techopedia Deals

Connect with us

Techopedia on Linkedin
Techopedia on Linkedin
Tweat cdn.techopedia.com
"Techopedia" on Twitter


'@Techopedia'
Sign up for Techopedia's Free Newsletter!

Email Newsletter

Join thousands of others with our weekly newsletter

Resources
The 4th Era of IT Infrastructure: Superconverged Systems
The 4th Era of IT Infrastructure: Superconverged Systems:
Learn the benefits and limitations of the 3 generations of IT infrastructure – siloed, converged and hyperconverged – and discover how the 4th...
Approaches and Benefits of Network Virtualization
Approaches and Benefits of Network Virtualization:
Businesses today aspire to achieve a software-defined datacenter (SDDC) to enhance business agility and reduce operational complexity. However, the...
Free E-Book: Public Cloud Guide
Free E-Book: Public Cloud Guide:
This white paper is for leaders of Operations, Engineering, or Infrastructure teams who are creating or executing an IT roadmap.
Free Tool: Virtual Health Monitor
Free Tool: Virtual Health Monitor:
Virtual Health Monitor is a free virtualization monitoring and reporting tool for VMware, Hyper-V, RHEV, and XenServer environments.
Free 30 Day Trial – Turbonomic
Free 30 Day Trial – Turbonomic:
Turbonomic delivers an autonomic platform where virtual and cloud environments self-manage in real-time to assure application performance.