National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 530 matching records. Displaying matches 141 through 160.

Name (Version) Target Authority Last Modified Resources
Symantec ProxySG STIG (Ver 1 Rel 2) Symantec ProxySG
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - Symantec ProxySG STIG
Microsoft Windows 10 Mobile STIG (Ver 1, Rel 4) Microsoft Windows 10 Mobile
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 10 Mobile STIG - Ver 1, Rel 4
Citrix XenDesktop 7.x STIG (1.0) Citrix XenDesktop 7.x
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - Citrix XenDesktop 7.x STIG
Oracle Linux 5 STIG (Version 1, Release 14) Oracle Linux 5
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - Oracle Linux 5 STIG - Ver 1, Rel 14
Tanium 6.5 STIG (Version 1, Release 3) TANIUM 6.5
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - Sunset Tanium 6.5 STIG - Ver 1, Rel 3
VMware AirWatch v9.x MDM STIG (Version 1, Release 2) VMware AirWatch v9.x
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - Sunset - VMware AirWatch v9.x MDM STIG - Ver 1, Rel 2
BIND 9.x STIG (Ver 1, Rel 9) BIND 9.x
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - BIND 9.x STIG - Ver 1, Rel 9
CIS Google Cloud Platform Foundation Benchmark (1.1.0) Google Cloud Computing Platform
Center for Internet Security (CIS)
04/13/2020 Prose - CIS Google Cloud Platform Foundation Benchmark v1.1.0
Network Other Devices (Version 8, Release 23) Cisco Content Services Switch 11000
ISC Bind 9.3.1
ISC Bind 9.3.2
Microsoft Windows 2000
Microsoft Windows Server 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Defense Information Systems Agency
03/16/2020 Standalone XCCDF 1.1.4 - Sunset - Network Other Devices STIG - Ver 8, Rel 23
Network L2 Switch STIG (Version 8, Release 27) Cisco PIX ASA
Foundry Networks BigIron Router
Juniper Router M10
Juniper Router M16
Juniper Router M20
Juniper Router M40
Juniper Router M5
Defense Information Systems Agency
03/16/2020 Standalone XCCDF 1.1.4 - Sunset - Network Layer 2 Switch STIG - Ver 8, Rel 27
DoD Consensus Security Configuration Checklist for Microsoft IE 8 (1.0) Microsoft Internet Explorer 8
Department of Defense
03/12/2020 Prose - D0D IE 8 security recommendations
DoD Consensus Security Configuration Checklist for Apple Mac OS 10.5 (Leopard) (1.0) Apple Mac OS X 10.5
Department of Defense
03/12/2020 Prose - Apple Mac OS 10.5 security recommendations
DoD - Microsoft Internet Explorer 9 Settings (31May2011) Microsoft Internet Explorer 9
Department of Defense
03/12/2020 Prose - Microsoft Internet Explorer - Final Draft DoD Internet Explorer 9 Settings
DoD - Microsoft Office 2010 Settings (21April2011) Microsoft Office 2010
Department of Defense
03/12/2020 GPOs - Microsoft Office 2010 Version 1.0 - DRAFT Office 2010 GPO
Prose - Microsoft Office 2010 - DoD Master Office 2010 Settings
Microsoft Windows 2008 Server DNS STIG (Version 1, Release 8) Windows 2008 Server DNS
Defense Information Systems Agency
03/05/2020 Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 Server DNS STIG - Ver 1, Rel 8
SQL Server 2012 STIG (Version 1, Release 20) Microsoft SQL Server 2012
Defense Information Systems Agency
02/19/2020 Standalone XCCDF 1.1.4 - Sunset - Microsoft SQL Server 2012 STIG - Ver 1, Rel 20
CIS MongoDB 3.6 Benchmark (1.0.0) MongoDB 3.6
Center for Internet Security (CIS)
02/03/2020 Prose - CIS MongoDB 3.6 Benchmark v1.0.0
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.39) IBM z/OS Version 2.1
IBM z/OS Version 2.2
IBM z/OS Version 2.3
Vanguard Integrity Professionals, Inc.
01/30/2020 ZIP - Vanguard z/OS RACF Checklist 6.39(PDF version)
ZIP - Vanguard z/OS RACF Checklist 6.39(XML version)
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.41) IBM Z/OS 2.2
IBM Z/OS 2.3
Vanguard Integrity Professionals, Inc.
01/29/2020 ZIP - Vanguard z/OS RACF Checklist 6.41PDF version)
ZIP - ZIP - Vanguard z/OS RACF Checklist 6.41(XML version)
Vanguard Configuration Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.36) IBM z/OS Version 2, Release 1
IBM z/OS Version 2, Release 2
Vanguard Integrity Professionals, Inc.
01/29/2020 Standalone XCCDF 1.1.4 - Vanguard z/OS RACF Checklist 6.36(XML version)
ZIP - Vanguard z/OS RACF Checklist 6.36(PDF version)
* This checklist is still undergoing review for inclusion into the NCP.