Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST IR 7692

Specification for the Open Checklist Interactive Language (OCIL) Version 2.0

Date Published: April 2011


David Waltermire (NIST), Karen Scarfone (G2), Maria Casipe (MITRE)



assessment; OCIL; Open Checklist Interactive Language; questionnaire; SCAP; security automation; Security Content Automation Protocol; XML
Control Families

Audit and Accountability; Assessment, Authorization and Monitoring; Configuration Management; Risk Assessment


Download URL

Supplemental Material:
None available

Related NIST Publications:
SP 800-70 Rev. 4
SP 800-179 Rev. 1 (Draft)
SP 800-179
SP 800-179 (Draft)

Document History:
04/07/11: IR 7692 (Final)


Security and Privacy

audit & accountability, risk assessment, security automation

Laws and Regulations

OMB Circular A-130