XCCDF is a specification language for writing security checklists, benchmarks, and related kinds of documents. https://csrc.nist.gov/Projects/Security-Content-Automation-Protocol/Specifications/xccdf