National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 530 matching records. Displaying matches 121 through 140.

Name (Version) Target Authority Last Modified Resources
CIS Microsoft SQL Server 2017 (1.1.0) Microsoft SQL Server 2017
Center for Internet Security (CIS)
07/08/2020 Prose - CIS Microsoft SQL Server 2017 Benchmark v1.1.0
CIS Microsoft SQL Server 2016 Benchmark (1.2.0) Microsoft SQL Server 2016
Center for Internet Security (CIS)
07/08/2020 Prose - CIS Microsoft SQL Server 2016 Benchmark v1.2.0
CIS Microsoft SQL Server 2008 R2 Benchmark (1.7.0) Microsoft SQL Server 2008 R2
Center for Internet Security (CIS)
07/08/2020 Prose - CIS Microsoft SQL Server 2008 R2 Benchmark v1.7.0
Microsoft Windows 2008 R2 STIG (Version 1, Release 34) Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008 R2 Service Pack 1
Microsoft Windows Server 2008 r2 Itanium
Microsoft Windows Server 2008 r2 Service Pack 1 Itanium
Microsoft Windows Server 2008 r2 x64
Microsoft Windows Server 2008 r2 x64 Service Pack 1
Defense Information Systems Agency
07/07/2020 SCAP 1.2 Content - Sunset - Microsoft Windows 2008 R2 DC STIG Benchmark - Ver 1, Rel 33
SCAP 1.2 Content - Sunset - Microsoft Windows 2008 R2 MS STIG Benchmark - Ver 1, Rel 34
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 R2 DC STIG - Ver 1, Rel 34
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 R2 MS STIG - Ver 1, Rel 33
Microsoft Windows 7 (Version 1, Release 36) Microsoft Windows 7
Defense Information Systems Agency
07/07/2020 SCAP 1.2 Content - Sunset - Microsoft Windows 7 STIG Benchmark - Ver 1, Rel 36
Machine-Readable Format - Sunset - Microsoft Windows 7 Audit Benchmark
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 7 STIG - Ver 1, Rel 32
Windows 2008 STIG (Version 6, Release 46) Microsoft Internet Explorer
Microsoft Windows Defender
Microsoft Windows Mail
Microsoft Windows Media Player
Microsoft Windows Server 2008
Defense Information Systems Agency
07/07/2020 SCAP 1.2 Content - Sunset - Microsoft Windows 2008 DC STIG Benchmark - Ver 6, Rel 45
SCAP 1.2 Content - Sunset - Microsoft Windows 2008 MS STIG Benchmark - Ver 6, Rel 45
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 DC STIG - Ver 6, Rel 47
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 MS STIG - Ver 6, Rel 46
VMware vSphere 6.5 STIG (Ver 1, Rel 4) VMware vSphere 6.5
Defense Information Systems Agency
06/25/2020 Machine-Readable Format - VMware vSphere 6.5 STIG for Ansible - Ver 1, Rel 2
Standalone XCCDF 1.1.4 - VMware vSphere 6.5 STIG
Docker Enterprise 2.x Linux/UNIX STIG (Ver 1 Rel 1) Docker Enterprise 2.0.0
Defense Information Systems Agency
06/23/2020 Machine-Readable Format - Docker Enterprise 2.x Linux/Unix STIG for Ansible - Ver 1, Rel 1
Standalone XCCDF 1.1.4 - Docker Enterprise 2.x Linux/UNIX STIG - Ver 1 Rel 1
Vanguard Compliance Manager z/OS RACF Checklist for completing a automated SRR Audit for Stig (6.43) IBM z/OS Version 2, Release 2
IBM z/OS Version 2, Release 3
IBM z/OS Version 2, Release 4
Vanguard Integrity Professionals, Inc.
06/15/2020 ZIP - Vanguard z/OS RACF Checklist 6.43(For Z/OS V2R2 release)
ZIP - Vanguard z/OS RACF Checklist 6.43(For Z/OS V2R3 release)
ZIP - Vanguard z/OS RACF Checklist 6.43(For Z/OS V2R4 release)
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.43) IBM z/OS Version 2, Release 2
IBM z/OS Version 2, Release 3
IBM z/OS Version 2, Release 4
Vanguard Integrity Professionals, Inc.
06/15/2020 ZIP - Vanguard z/OS RACF Checklist 6.43 PDF version
ZIP - Vanguard z/OS RACF Checklist 6.43 XML version
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.42) IBM z/OS Version 2.2
IBM z/OS Version 2.3
Vanguard Integrity Professionals, Inc.
06/15/2020 ZIP - Vanguard z/OS RACF Checklist 6.42 PDF version
ZIP - Vanguard z/OS RACF Checklist 6.42 XML version
Microsoft Windows Privileged Access Workstation (PAW) STIG (Version 1, Release 3) Microsoft Windows Dedicated Administrative Workstation
Defense Information Systems Agency
06/09/2020 Standalone XCCDF 1.1.4 - Microsoft Windows Privileged Access Workstation (PAW) STIG - Ver 1, Rel 3
Azure Security Benchmark (1.0) Microsoft Azure
Microsoft Corporation
05/29/2020 Prose - Azure Security Benchmark
Bromium Secure Platform Secure Configuation Checklist (4.0) Bromium Secure Platform 4.0
Bromium
05/19/2020 ZIP - Bromium Secure Checklist Policy
Prose - Bromium Secure Configuration Checklist
Samsung Android OS 10 with Knox 3.x STIG (Ver 1, Rel 1) Samsung Android OS 10.0
Defense Information Systems Agency
05/15/2020 Standalone XCCDF 1.1.4 - Samsung Android OS 10 with Knox 3.x STIG - Ver 1, Rel 1
Samsung Android OS 7 (with Knox 2.x) STIG (Ver 1, Rel 7) Samsung Android OS 7
Defense Information Systems Agency
04/29/2020 Standalone XCCDF 1.1.4 - Sunset - Samsung Android OS 7 with Knox 2.x STIG - Ver 1, Rel 7
Microsoft SQL Server 2014 STIG (Version 1, Release 1) Microsoft SQL Server 2014
Defense Information Systems Agency
04/29/2020 Standalone XCCDF 1.1.4 - Microsoft SQL Server 2014 STIG
McAfee VSEL 1.9/2.0 STIG (Version 1, Release 1) McAfee VirusScan Enterprise for Linux 1.9x
McAfee VirusScan Enterprise for Linux 2.0x
Defense Information Systems Agency
04/29/2020 Standalone XCCDF 1.1.4 - McAfee VSEL 1.9/2.0 STIG
CIS Oracle Database 12c Benchmark (3.0.0) Oracle Database 12c
Oracle Database 12c Release 2
Center for Internet Security (CIS)
04/29/2020 Prose - CIS Oracle Database Server 12c Benchmark v3.0.0
Video Services Policy STIG (Version 1, Release 11) PolyCom CMA 5000
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - Video Services Policy STIG - Ver 1, Rel 11
* This checklist is still undergoing review for inclusion into the NCP.