Government

U.S. Federal Desktop Core Configuration (FDCC)

CCE-IDs are the main identifiers used for the settings in the U.S. FDCC data file downloads.

Security Content Automation Protocol (SCAP)

CCE is one of ten existing standards the U.S. National Institute of Standards and Technology’s (NIST) SCAP to enable automated vulnerability management, measurement, and policy compliance evaluation.

Mappings Between Best-Practice Documents

• Defense Information Systems Agency Defense Information Systems Agency Security Technical Implementation Guides (STIGS)
• National Institute of Standards and Technology Security Configuration Guides
• National Security Agency Security Configuration Guides

Community

Tools Including CCE-IDs (SCAP-Validated)

• Atlantic Systems Group, Inc.’s IA² SCAP Module
• BigFix, Inc.’s Discovery 7 / Security Configuration and Vulnerability Management Pac
• NetIQ Corporation’s NetIQ Secure Configuration Manager
• Symantec Corporation’s Symantec Risk Automation Suite
• Telos Corporation’s Xacta IA Manager Continuous Assessment
• ThreatGuard, Inc.’s S-CAT
• ThreatGuard, Inc.’s Secutor Magnus
• ThreatGuard, Inc.’s Secutor Prime

Security Guides Incorporating CCE-IDs

• 2008 Microsoft Windows Server Security Guide
• 2007 Microsoft Office Security Guide

Mappings Between Best-Practice Documents

• Center for Internet Security Benchmark Documents
• Unified Compliance Framework