|
Work item:
|
X.1527 (ex X.xccdf)
|
|
Subject/title:
|
Extensible configuration checklist description format
|
|
Status:
|
Discontinued
|
|
Approval process:
|
TAP
|
|
Type of work item:
|
Recommendation
|
|
Version:
|
New
|
|
Equivalent number:
|
-
|
|
Timing:
|
-
|
|
Liaison:
|
-
|
|
Supporting members:
|
-
|
|
Summary:
|
This Recommendation specifies the data model and Extensible Markup Language (XML) representation for the Extensible Configuration Checklist Description Format (XCCDF). An XCCDF document is a structured collection of security configuration rules for some set of target systems. The XCCDF specification is designed to support information interchange, document generation, organizational and situational tailoring, automated compliance testing, and scoring. The specification also defines a data model and format for storing results of security guidance or checklist testing. The intent of XCCDF is to provide a uniform foundation for expression of security checklists and other configuration guidance, and thereby foster more widespread application of good security practices. This is achieved by listing the relevant clauses of NIST Interagency Report 7275 Revision 4, Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2, and showing whether they are normative or informative.
|
|
Comment:
|
-
|
|
Reference(s):
|
|
|
Historic references:
|
|
Contact(s):
|
|
| ITU-T A.5 justification(s): |
|
|
|
|
First registration in the WP:
2009-10-23 11:03:28
|
|
Last update:
2012-10-05 14:02:27
|
