A language for authoring security checklists/benchmarks and for reporting results of evaluating them.
Source(s):
CNSSI 4009-2015
under eXtensible configuration checklist description format (XCCDF)
NIST SP 800-126 Rev. 2
SCAP language for specifying checklists and reporting checklist results.
Source(s):
NIST SP 800-128
under Extensible Configuration Checklist Description Format (XCCDF)