National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 517 matching records. Displaying matches 1 through 20.


Name (Version) Target Product Category Authority Last Modified Resources
USGCB Windows Vista (3.0.x.1) Microsoft Windows Vista Operating System USGCB/TIS 03/30/2018 SCAP 1.2 Content - USGCB Windows Vista using OVAL version 5.10 - Tested By: USGCB/TIS
GPOs - USGCB Windows Vista GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Windows XP (3.0.x.1) Microsoft Windows XP Pro SP2
Microsoft Windows XP Service Pack 3
Operating System USGCB/TIS 03/30/2018 SCAP 1.2 Content - USGCB Windows XP using OVAL version 5.10 - Tested By: USGCB/TIS
GPOs - USGCB Windows Vista Firewall GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Windows Vista Firewall (2.1.x.1) Microsoft Windows Vista Operating System USGCB/TIS 03/30/2018 SCAP 1.2 Content - USGCB Windows Vista Firewall using OVAL version 5.10 - Tested By: USGCB/TIS
GPOs - USGCB Windows Vista Firewall GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Windows XP Firewall (2.1.x.1) Microsoft Windows XP Pro Service Pack 3
Microsoft Windows XP Pro Service Pack 2
Operating System USGCB/TIS 03/30/2018 SCAP 1.2 Content - USGCB Windows XP Firewall SCAP content using OVAL version 5.10 - Tested By: USGCB/TIS
GPOs - USGCB Windows XP Firewall GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Internet Explorer 7 (2.1.x.1) Microsoft Internet Explorer 7 Web Browser USGCB/TIS 03/30/2018 SCAP 1.2 Content - USGCB Internet Explorer 7 SCAP Content using OVAL version 5.10 - Tested By: USGCB/TIS
GPOs - USGCB IE7 GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Windows 7 (2.0.x.1) Microsoft Windows 7
Microsoft Windows 7 x86 (32-bit)
Microsoft Windows 7 x64 (64-bit)
Operating System USGCB/TIS 03/30/2018 SCAP 1.2 Content - Windows 7 Oval 5.10 - Tested By: USGCB/TIS
GPOs - USGCB Windows 7 GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Windows 7 Firewall (1.3.x.1) Microsoft Windows 7
Microsoft Windows 7 32-bit (X86)
Microsoft Windows 7 64-bit (X64)
Operating System USGCB/TIS 03/30/2018 SCAP 1.2 Content - Windows 7 Firewall Oval 5.10 - Tested By: USGCB/TIS
GPOs - USGCB Windows 7 Firewall GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Internet Explorer 8 (1.3.x.1) Microsoft Internet Explorer 8 Web Browser USGCB/TIS 03/30/2018 SCAP 1.2 Content - USGCB Internet Explorer 8 SCAP Content using OVAL version 5.10 - Tested By: USGCB/TIS
GPOs - USGCB IE8 GPOs
Prose - This is the human readable version of the USGCB settings.
USGCB Red Hat Enterprise Linux (RHEL) 5 Desktop (1.2.5.0) Red Hat Enterprise Linux 5 Operating System USGCB/TIS 03/30/2018 SCAP 1.1 Content - USGCB Red Hat Enterprise Linux (RHEL) 5 Desktop - Tested By: USGCB/TIS
Puppet Module - RHEL 5 Puppet Module
Reference Link - Kickstart file
Prose - USGCB-RHEL5-Desktop-Issues-Version-1.0.5.0
Prose - USGCB-RHEL5-Desktop-Settings-Version-1.0.5.0
Security Baselines for Red Hat Enterprise Linux 7.x (v0.1.38) Red Hat Enterprise Linux 7.0
Red Hat Enterprise Linux 7.1
Red Hat Enterprise Linux 7.2
Red Hat Enterprise Linux 7.3
Red Hat Enterprise Linux 7.4
Red Hat 05/18/2018 SCAP 1.3 Content - [RECOMMENDED] SCAP Security Guide 0.1.38 with OVAL 5.11 - Tested By: Not Available
SCAP 1.2 Content - SCAP Security Guide 0.1.38 with OVAL 5.10 - Tested By: Not Available
Adobe Acrobat Reader DC Classic Track (Version 1, Release 3) Adobe Acrobat Reader Desktop Application Defense Information Systems Agency 05/25/2018 SCAP 1.2 Content - Adobe Acrobat Reader Document Cloud (DC) Classic Track STIG Benchmark - Ver 1, Rel 3
Standalone XCCDF 1.1.4 - Adobe Acrobat Reader DC Class Track STIG - Ver 1, Rel 3
Adobe Acrobat Reader DC Continuous Track STIG (Ver 1, Rel 4) Adobe Acrobat Reader Desktop Application Defense Information Systems Agency 05/25/2018 SCAP 1.2 Content - Adobe Acrobat Reader Document Cloud (DC) Continuous Track STIG Benchmark - Ver 1, Rel 2
Standalone XCCDF 1.1.4 - Adobe Acrobat Reader DC Continuous Track STIG - Ver 1, Rel 4
APT-Suspicious file names and file locations (v0.4) Microsoft Windows XP
Microsoft Windows 7
Operating System CyberESI 05/05/2017 SCAP 1.2 Content - APT - Suspicious file names and file locations
Google Chrome Browser STIG for Windows (Version 1, Release 12) Google Chrome 24.0.1272.0
Google Chrome 23.0.1271.0
Web Browser Defense Information Systems Agency 05/25/2018 SCAP 1.2 Content - Google Chrome for Windows STIG Benchmark - Ver 1, Rel 7
Standalone XCCDF 1.1.4 - Google Chrome Browser STIG - Ver 1, Rel 12
Internet Explorer 11 STIG (Version 1, Release 15) Microsoft Internet Explorer 11 Web Browser Defense Information Systems Agency 05/25/2018 SCAP 1.2 Content - Microsoft Internet Explorer 11 STIG Benchmark - Ver 1, Rel 11
Standalone XCCDF 1.1.4 - Microsoft Internet Explorer 11 STIG - Ver 1, Rel 15
Microsoft Office 2013 STIG (Version 1 Release 3) Microsoft Office 2013 Office Suite Defense Information Systems Agency 05/25/2018 SCAP 1.2 Content - Microsoft Office System 2013 STIG Benchmark - Ver 1, Rel 5 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Office 2013 STIG - Version 1 Release 3
Prose - Microsoft Office 2013 Overview - Version 1, Release 5
Office System 2013 STIG (Version1, Release 6) Office System 2013 Desktop Client Defense Information Systems Agency 06/22/2018 SCAP 1.2 Content - Microsoft Office System 2013 STIG Benchmark - Ver 1, Rel 5 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Office System 2013 STIG - Ver 1, Rel 6
Microsoft Office System 2016 STIG (Version 1, Release 1) Microsoft Office 2016 Office Suite Defense Information Systems Agency 05/25/2018 SCAP 1.2 Content - Microsoft Office System 2016 STIG Benchmark - Ver 1, Rel 2 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Office System 2016 STIG - Version 1, Release 1
Microsoft Publisher 2016 STIG (Version 1, Release 3) Microsoft Publisher 2013
Microsoft Publisher 2016
Desktop Application
Office Suite
Defense Information Systems Agency 05/27/2018 SCAP 1.2 Content - Microsoft Publisher 2016 STIG Benchmark - Ver 1, Rel 3 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Publisher 2016 STIG - Ver 1, Rel 3
Windows 10 STIG (Version 1, Release 13) Microsoft Windows 10 Defense Information Systems Agency 05/27/2018 SCAP 1.2 Content - Microsoft Windows 10 STIG Benchmark - Ver 1, Rel 11
Standalone XCCDF 1.1.4 - Microsoft Windows 10 STIG - Ver 1, Rel 13
* This checklist is still undergoing review for inclusion into the NCP.