National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 537 matching records. Displaying matches 1 through 20.

Name (Version) Target Authority Last Modified Resources
Microsoft Edge STIG (Ver 1, Rel 1) Microsoft Edge
Defense Information Systems Agency
02/22/2021 Standalone XCCDF 1.1.4 - Microsoft Edge STIG - Ver 1, Rel 1
Juniper Router STIG (Version 1, Release 4) Juniper JunOS
Defense Information Systems Agency
02/19/2021 Standalone XCCDF 1.1.4 - Juniper Router STIG
Apple OS X 10.15 STIG (Ver 1, Rel 3) Apple OS X 10.15
Defense Information Systems Agency
02/12/2021 Standalone XCCDF 1.1.4 - Apple OS X 10.15 STIG - Ver 1, Rel 3
Apple OS X 10.14 (Mojave) STIG (Ver 2, Rel 2) Apple OS X 10.14
Defense Information Systems Agency
02/12/2021 Standalone XCCDF 1.1.4 - Apple OS X 10.14 STIG - Ver 2, Rel 2
Apple OS X 10.13 STIG (Ver 2, Rel 2) Apple macOS 10.13
Defense Information Systems Agency
02/12/2021 Standalone XCCDF 1.1.4 - Apple OS X 10.13 STIG - Ver 2, Rel 2
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.47-8.1) IBM z/OS Version 2, Release 3
IBM z/OS Version 2, Release 4
Vanguard Integrity Professionals, Inc.
02/08/2021 ZIP - Vanguard z/OS RACF Checklist 6.47/8.1 PDF version
ZIP - Vanguard z/OS RACF Checklist 6.47/8.1 XML version
Infoblox 8.x Domain Name System (DNS) STIG (Version 1, Release 1) Infoblox 8.x Domain Name System (DNS)
Defense Information Systems Agency
02/03/2021 Standalone XCCDF 1.1.4 - Infoblox 8.x DNS STIG - Ver 1, Rel 1
Suse Linux Enterprise Server (SLES) 15 STIG (Version 1, Release 1) SUSE Enterprise Linux 15
Defense Information Systems Agency
02/03/2021 Standalone XCCDF 1.1.4 - SUSE Linux Enterprise Server 15 STIG - Ver 1, Rel 1
Honeywell Android 9.x STIG (Version 1, Release 1) Google Android 9.x
Defense Information Systems Agency
01/29/2021 Standalone XCCDF 1.1.4 - Honeywell Android 9.x STIG
Juniper SRX Services Gateway (SG) STIG (Ver 2, Rel 1) Juniper SRX Services Gateway (SG)
Defense Information Systems Agency
01/28/2021 Standalone XCCDF 1.1.4 - Juniper SRX SG STIG for Ansible - Ver 1, Rel 1
Standalone XCCDF 1.1.4 - Juniper SRX SG STIG
Apple OS/iPad OS 13 STIG (Ver 2, Rel 1) Apple iOS 13.0
Defense Information Systems Agency
01/28/2021 Standalone XCCDF 1.1.4 - Sunset - Apple OS/iPad OS 13 STIG - Ver 2, Rel 1
Apache Server 2.4 Windows STIG (Y20M10) Apache HTTP Server 2.4.0
Defense Information Systems Agency
01/28/2021 Standalone XCCDF 1.1.4 - Apache Server 2.4 Windows STIG
Microsoft Exchange Server 2016 STIG (Version 2, Release 1) Microsoft Exchange Server 2016
Defense Information Systems Agency
01/28/2021 Standalone XCCDF 1.1.4 - Microsoft Exchange 2016 STIG
Windows 10 STIG (Version 2, Release 1) Microsoft Windows 10
Defense Information Systems Agency
01/28/2021 SCAP 1.2 Content - Microsoft Windows 10 STIG Benchmark - Ver 2, Rel 1
GPOs - Group Policy Objects (GPOs) - January 2021
Standalone XCCDF 1.1.4 - Microsoft Windows 10 STIG - Ver 2, Rel 1
Adobe Acrobat Pro DC Continuous Track STIG (Ver 1, Rel 2) Adobe Acrobat Pro DC Continuous Track
Defense Information Systems Agency
01/28/2021 GPOs - Group Policy Objects (GPOs) - January 2021
Standalone XCCDF 1.1.4 - Adobe Acrobat Pro DC Continuous Track STIG - Ver 1, Rel 2
Microsoft Windows Server 2019 (Ver 2, Rel 1) Microsoft Windows Server 2019
Defense Information Systems Agency
01/28/2021 SCAP 1.2 Content - Microsoft Windows Server 2019 STIG Benchmark - Ver 2, Rel 1
GPOs - Group Policy Objects (GPOs) - January 2021
Machine-Readable Format - Microsoft Windows Server 2019 STIG for Chef - Ver 1, Rel 2
Standalone XCCDF 1.1.4 - Microsoft Windows Server 2019 STIG - Ver 2, Rel 1
Microsoft Office 365 ProPlus STIG (Ver 2, Rel 1) Microsoft Office 365 ProPlus
Defense Information Systems Agency
01/28/2021 GPOs - Group Policy Objects (GPOs) - January 2021
Standalone XCCDF 1.1.4 - Microsoft Office 365 ProPlus STIG - Ver 2, Rel 1
Internet Explorer 11 STIG (Version 1, Release 19) Microsoft Internet Explorer 11
Defense Information Systems Agency
01/28/2021 SCAP 1.2 Content - Microsoft Internet Explorer 11 STIG Benchmark - Ver 1, Rel 15
GPOs - Group Policy Objects (GPOs) - January 2021
Standalone XCCDF 1.1.4 - Microsoft Internet Explorer 11 STIG - Ver 1, Rel 19
Google Chrome Browser STIG for Windows (Version 2, Release 2) Google Chrome 33
Defense Information Systems Agency
01/28/2021 SCAP 1.2 Content - Google Chrome for Windows STIG Benchmark - Ver 2, Rel 2
GPOs - Group Policy Objects (GPOs) - January 2021
Standalone XCCDF 1.1.4 - Google Chrome STIG - Ver 2, Rel 2
Windows Server 2012 / 2012 R2 STIG (Version 3, Release 1) Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Defense Information Systems Agency
01/28/2021 SCAP 1.2 Content - Microsoft Windows Server 2012 and 2012 R2 DC STIG Benchmark - Ver 3, Rel 1
SCAP 1.2 Content - Microsoft Windows Server 2012 and 2012 R2 MS STIG Benchmark - Ver 3, Rel 1
GPOs - Group Policy Objects (GPOs) - January 2021
Standalone XCCDF 1.1.4 - Microsoft Windows 2012 and 2012 R2 DC STIG - Ver 3, Rel 1
Standalone XCCDF 1.1.4 - Microsoft Windows 2012 and 2012 R2 MS STIG - Ver 3, Rel 1
* This checklist is still undergoing review for inclusion into the NCP.