A language for representing system configuration information, assessing machine state, and reporting assessment results.
Source(s):
CNSSI 4009-2015
under open vulnerability assessment language (OVAL)
NIST SP 800-126 Rev. 2
SCAP language for specifying low-level testing procedures used by checklists.
Source(s):
NIST SP 800-128