Skip to content

Glossary: Vulnerability, Asset and Change Management

XCCDF (Extensible Configuration Checklist Description Format)

Also written: XCCDF, kc-xccdf.xml

The SCAP format for checklists: rules with titles, severities, fixes and profiles. Each rule points to an OVAL test.

Where the book teaches it

Related terms

OVAL (Open Vulnerability and Assessment Language)SCAP (Security Content Automation Protocol)Profile (SCAP)OpenSCAP