CCE Home Common Configuration Enumeration: Unique Identifiers for Common System Configuration Issues
CCE Website is in "Archive" status — read the announcement


CCE in Use — Archive

As the international industry standard for unique identifiers for system configuration issues, CCE Identifiers are included in a variety of information security products and services. CCE also helps in Making Security Measurable.


U.S. Federal Desktop Core Configuration (FDCC)

CCE-IDs are the main identifiers used for the settings in the U.S. FDCC data file downloads.

Security Content Automation Protocol (SCAP)

CCE is one of ten existing standards the U.S. National Institute of Standards and Technology’s (NIST) SCAP to enable automated vulnerability management, measurement, and policy compliance evaluation.

Mappings Between Best-Practice Documents



Tools Including CCE-IDs (SCAP-Validated)

Security Guides Incorporating CCE-IDs

Mappings Between Best-Practice Documents



Page Last Updated: March 22, 2013