Infosec glossary entry

CCE

CCE:
Common Configuration Enumeration

Common Configuration Enumeration (CCE) is a standardized naming scheme and part of the SCAP framework, used to identify and categorize system configurations and security settings across different platforms. CCE provides a consistent framework for referencing configurations, enabling organizations to assess compliance, identify vulnerabilities, and implement best practices for system hardening. By utilizing CCE, organizations can enhance their security posture and streamline their compliance efforts.


provides unique identifiers to security-related system configuration issues NIST

By jean-christoph

February 8, 2022

framework, vulnerability

this might interest you as well

What Fantasy Role-Playing Games Can Teach Us About Cybersecurity Roles

— And why your SOC might actually need a Bard 🐉⚔️ Cybersecurity teams are often compared to armies, fire brigades, or special forces. Personally? I think they’re much closer to a party of heroes in a classic fantasy role-playing game. No matter how many frameworks, SIEMs, or AI tools we summon, defending a digital kingdom

Read More

Lessons from Sun Tzu’s “The Art of War” in Cybersecurity: Timeless Wisdom or Outdated Tactics?

Introduction Sun Tzu’s "The Art of War" is a legendary strategic treatise written more than 2,500 years ago. Its enduring principles of warfare strategy have transcended military boundaries, influencing disciplines from business management to competitive sports. In today’s digital age, its relevance is increasingly apparent in the cybersecurity landscape, particularly for CISOs of medium-sized enterprises,

Read More

Ransomware Resilience Starts in the Mind: Overcoming Cognitive Biases and Decision-Making Errors in Cybersecurity

Why We Keep Losing Despite Stronger Security Controls Over the past three years, businesses have almost doubled their confidence in cybersecurity—rising from 32% in 2021 to 54% in 2024 (The Global Cost of Ransomware Study, 2025). Despite this, ransomware’s impact has only grown: 40% of affected companies suffered significant revenue losses, 58% experienced operational downtime,

Read More