National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 530 matching records. Displaying matches 101 through 120.

Name (Version) Target Authority Last Modified Resources
BlackBerry UEM 12.11 STIG (Ver 1, Rel 1) BlackBerry UEM 12.11
Defense Information Systems Agency
08/10/2020 Standalone XCCDF 1.1.4 - Sunset - BlackBerry UEM 12.11 STIG - Ver 1, Rel 1
Samsung Android OS 9 (with Knox 3.x) STIG (Ver 1, Rel 1) Samsung Android OS 9.0
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Samsung Android OS 9 with Knox 3.x STIG
Juniper Router STIG (Version 1, Release 4) Juniper JunOS
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Juniper Router STIG
HP FlexFabric Switch Router STIG (1.0) HP FlexFabric
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - HP FlexFabric Switch STIG
Microsoft .NET Framework 4 (Version 1, Release 9) Microsoft .NET Framework 4.0
Defense Information Systems Agency
08/04/2020 SCAP 1.2 Content - Microsoft .Net Framework 4 STIG Benchmark - Ver 1, Rel 8
Standalone XCCDF 1.1.4 - Microsoft .Net Framework STIG 4.0 STIG - Ver 1, Rel 9
Samsung Android OS 8 (with Knox 3.x) STIG (Ver 1, Rel 3) Google Android 8.0
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Sunset - Samsung Android OS 8 with Knox 3.x STIG
Red Hat Jboss Enterprise Application Platform (EAP) 6.3 STIG (Ver 1, Rel 5) Red Hat JBoss Enterprise Application Platform 6.3.0
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Red Hat JBoss Enterprise Application Platform (EAP) 6.3 STIG - Ver 1, Rel 5
Oracle HTTP Server 12.1.3 STIG (Version 1, Release 7) Oracle HTTP Server 12.1.3 STIG, Version 1, Release 1
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Oracle HTTP Server 12.1.3 STIG - Ver 1, Rel 7
Oracle 12c Database STIG (Ver 1, Rel 18) Oracle Database 12c
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Oracle Database 12c STIG - Ver 1, Rel 18
MongoDB Enterprise Advanced 3.x STIG (Ver 1, Rel 2) MongoDB 3.2
MongoDB 3.4
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - MongoDB Enterprise Advanced 3.x STIG - Ver 1, Rel 2
Sharepoint 2013 (Version 1, Release 9) Microsoft Sharepoint Server 2013
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Microsoft SharePoint 2013 STIG - Ver 1, Rel 9
Oracle 11.2g Database STIG (Version 1, Release 19) Oracle Database 11g 11.2
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Oracle 11.2g Database STIG - Ver 1, Rel 19
BlackBerry Enterprise Mobility Server (BEMS) 2.x STIG (Ver 1, Rel 3) BlackBerry Enterprise Mobility Server (BEMS)
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - BlackBerry Enterprise Mobility Server (BEMS) 2.x STIG - Ver 1, Rel 3
Mozilla Firefox STIG (Version 4, Release 29) Mozilla Firefox
Defense Information Systems Agency
08/04/2020 SCAP 1.2 Content - Mozilla Firefox for RHEL STIG Benchmark - Ver 1, Rel 7
SCAP 1.2 Content - Mozilla Firefox Windows STIG Benchmark - Ver 1, Rel 6
Standalone XCCDF 1.1.4 - Mozilla Firefox STIG - Ver 4, Rel 29
ZIP - Mozilla Firefox STIG Configuration Files - Ver 1, Rel 4
Arista Multilayer Switch (MLS) DCS-7000 Series (Version 1, Release 3) Arista Multilayer Switch (MLS) DCS-7050T
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Arista MLS DCS-7000 Series STIG
VMWare Workspace ONE UEM STIG (Ver 1, Rel 1) Workspace ONE Unified Endpoint Management
Defense Information Systems Agency
07/20/2020 Standalone XCCDF 1.1.4 - VMWare Workspace ONE UEM STIG - Ver 1, Rel 1
MarkLogic Server v9 STIG (Ver 1, Rel 1) MarkLogic Server v9
Defense Information Systems Agency
07/09/2020 Standalone XCCDF 1.1.4 - MarkLogic Server v9 STIG - Ver 1, Rel 1
CIS Microsoft SQL Server 2019 (1.1.0) Microsoft SQL Server 2019
Center for Internet Security (CIS)
07/08/2020 Prose - CIS Microsoft SQL Server 2019 Benchmark v1.1.0
CIS Microsoft SQL Server 2012 Benchmark (1.6.0) Microsoft SQL Server 2012
Center for Internet Security (CIS)
07/08/2020 Prose - CIS Microsoft SQL Server 2014 Benchmark v1.6.0
CIS Microsoft SQL Server 2014 Benchmark (1.5.0) Microsoft SQL Server 2014
Center for Internet Security (CIS)
07/08/2020 Prose - CIS Microsoft SQL Server 2014 Benchmark v1.5.0
* This checklist is still undergoing review for inclusion into the NCP.