The eXtensible Configuration Checklist Description Format (XCCDF v1.1.4) is an XML specification and language that provides a common framework for developing security checklists and benchmarks. The National Institute of Standards and Technology (NIST) hosts and maintains the XCCDF specification and language.
The SCAP v1.0 specification requires an SCAP benchmark to use an XCCDF document to define the checklist or benchmark of an SCAP data stream.
CCS supports XCCDF as part of an SCAP v1.0 data stream. During import of the SCAP data stream, CCS validates the XCCDF document against the official XCCDF schema. If an XCCDF benchmark contains multiple profiles, then CCS imports all the profiles.
CCS uses XCCDF specification in the following manner:
Imports XCCDF v1.1.4 as part of the SCAP data stream