National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 530 matching records. Displaying matches 161 through 180.

Name (Version) Target Authority Last Modified Resources
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.40) IBM Z/OS 2.2
IBM Z/OS 2.3
IBM z/OS Version 2.1
Vanguard Integrity Professionals, Inc.
01/29/2020 ZIP - Vanguard z/OS RACF Checklist 6.40(PDF version)
ZIP - Vanguard z/OS RACF Checklist 6.40(XML version)
Microsoft Exchange Server 2013 (Version 1, Release 6) Microsoft Exchange Server 2013
Defense Information Systems Agency
01/21/2020 Standalone XCCDF 1.1.4 - Microsoft Exchange 2013 STIG
Google Android 10.x STIG (Ver 1, Rel 2) Google Android 10.0
Defense Information Systems Agency
01/21/2020 Standalone XCCDF 1.1.4 - Google Android 10.x STIG - Ver 1, Rel 2
Apple OS X 10.12 STIG (Version 1, Release 6) Apple OS X 10.12
Defense Information Systems Agency
01/17/2020 Standalone XCCDF 1.1.4 - Sunset - Apple OS X 10.12 STIG - Ver 1, Rel 6
BlackBerry OS 10.3.x STIG (Version 1, Release 4) Blackberry OS 10.3
Defense Information Systems Agency
01/17/2020 Standalone XCCDF 1.1.4 - Sunset - BlackBerry OS 10.3x STIG - Ver 1, Rel 4
BlackBerry 10.3 OS STIG (Version 1, Release 4) Blackberry OS 10.0
Defense Information Systems Agency
01/17/2020 Standalone XCCDF 1.1.4 - Sunset - BlackBerry OS 10.3x STIG - Ver 1, Rel 4
Internet Explorer 10 STIG (Version 1 Release 16) Microsoft Internet Explorer 10
Defense Information Systems Agency
01/17/2020 SCAP 1.2 Content - Sunset - Microsoft Internet Explorer 10 STIG Benchmark - Ver 1, Rel 10
Standalone XCCDF 1.1.4 - Sunset - Microsoft Internet Explorer 10 STIG - Ver 1, Rel 16
Microsoft IIS 7.0 STIG (Version 1, Release 19) Microsoft Internet Information Services 7.0
Defense Information Systems Agency
01/17/2020 Standalone XCCDF 1.1.4 - Sunset - Microsoft IIS 7.0 STIG
Windows XP Symantec Virus Scan (Version 1.1) Microsoft Windows XP Pro SP2
Symantec Antivirus
Defense Information Systems Agency
01/16/2020 Standalone XCCDF 1.1.4 - Symantec Antivirus running on Windows XP Pro SP2.
Microsoft Security Compliance Manager - Windows 10 1607 (1.0) Microsoft Windows 10 1607
Microsoft Corporation
01/13/2020 SCAP 1.0 Content - Microsoft Windows 10 1607 BitLocker Security (generated from Microsoft Security Compliance Manager).
SCAP 1.0 Content - Microsoft Windows 10 1607 Computer Security Compliance (generated from Microsoft Security Compliance Manager).
SCAP 1.0 Content - Microsoft Windows 10 1607 Credential Guard Security (generated from Microsoft Security Compliance Manager).
SCAP 1.0 Content - Microsoft Windows 10 1607 Domain Security Compliance (generated from Microsoft Security Compliance Manager).
GPOs - Windows 10 1607 Security Baseline
Microsoft Security and Compliance Manager - Windows Server 2016 (1.0) Microsoft Windows Server 2016
Microsoft Corporation
01/13/2020 SCAP 1.0 Content - Microsoft Windows Server 2016 Domain Controller Security Compliance (generated from Microsoft Security Compliance Manager).
SCAP 1.0 Content - Microsoft Windows Server 2016 Domain Security Compliance (generated from Microsoft Security Compliance Manager).
SCAP 1.0 Content - Microsoft Windows Server 2016 Member Server Security Compliance (generated from Microsoft Security Compliance Manager).
GPOs - Windows 10 1607 Security Baseline
CIS Slackware Linux 10.2 Benchmark (v1.1.0) Slackware Linux 10.2
Center for Internet Security (CIS)
01/10/2020 Prose - CIS Slackware Linux 10.2 Benchmark v1.1.0
Microsoft Windows 10 1511 (1.0) Microsoft Windows 10 1511 32-bit
Microsoft Windows 10 1511 64-bit
Microsoft Corporation
01/08/2020 Prose - Microsoft Windows 10 1511
CIS IBM AIX 7.1 Benchmark (1.1.0) IBM AIX 7.1
Center for Internet Security (CIS)
01/07/2020 Prose - CIS IBM AIX 7.1 Benchmark v1.1.0
CIS Google Android Benchmark (1.3.0) Google Android 8.0
Center for Internet Security (CIS)
01/07/2020 Prose - CIS Google Android Benchmark v1.3.0
CIS Docker 1.6 Benchmark (v1.0.0) Docker 1.6
Center for Internet Security (CIS)
01/07/2020 Prose - CIS Docker 1.6 Benchmark v1.0.0
CIS Cisco IOS Benchmark (v3.0.1) Cisco IOS
Center for Internet Security (CIS)
01/07/2020 Prose - CIS Cisco IOS Benchmark v3.0.1
CIS Red Hat Enterprise Linux 7 Benchmark (2.2.0) Red Hat Enterprise Linux 7.0
Center for Internet Security (CIS)
01/03/2020 Prose - CIS Red Hat Enterprise Linux 7 Benchmark v2.2.0
CIS Solaris 11 Benchmark (1.1.0) Oracle Solaris 11
Center for Internet Security (CIS)
01/03/2020 Prose - CIS Solaris 11 Benchmark v1.1.0
CIS Windows XP Professional Benchmark (v3.1.0) Microsoft Windows XP Professional
Center for Internet Security (CIS)
01/03/2020 Prose - CIS Windows XP Professional Benchmark v3.1.0
* This checklist is still undergoing review for inclusion into the NCP.