National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 552 matching records. Displaying matches 281 through 300.

Name (Version) Target Authority Last Modified Resources
CIS PostgreSQL 9.5 Benchmark (1.1.0) PostgreSQL 9.5
Center for Internet Security (CIS)
09/24/2019 Prose - CIS PostgreSQL 9.5 Benchmark v1.1.0
CIS PostgreSQL 10 Benchmark (1.0.0) PostgreSQL 10
Center for Internet Security (CIS)
09/24/2019 Prose - CIS PostgreSQL 10 Benchmark v1.0.0
CIS Docker Community Edition Benchmark (1.1.0) Docker 17.06
Center for Internet Security (CIS)
09/24/2019 Prose - CIS Docker Community Edition Benchmark v1.1.0
CIS Apple iOS 12 Benchmark (1.0.0) Apple iOS 12
Center for Internet Security (CIS)
09/24/2019 Prose - CIS Apple iOS 12 Benchmark v1.0.0
CIS Microsoft Windows Server 2012 R2 Benchmark (2.3.0) Microsoft Windows Server 2012 R2
Center for Internet Security (CIS)
09/24/2019 Prose - CIS Microsoft Windows Server 2012 R2 Benchmark v2.3.0
CIS Microsoft Windows Server 2008 (non-R2) Benchmark (3.1.0) Microsoft Windows Server 2008
Center for Internet Security (CIS)
09/24/2019 Prose - CIS Microsoft Windows Server 2008 (non-R2) Benchmark v3.1.0
CIS Microsoft Windows Server 2008 R2 Benchmark (3.1.0) Microsoft Windows Server 2008 R2
Center for Internet Security (CIS)
09/24/2019 Prose - CIS Microsoft Windows Server 2008 R2 Benchmark v3.1.0
CIS VMware ESXi 6.5 Benchmark (1.0.0) VMware vSphere 6.0 ESXi
Center for Internet Security (CIS)
09/24/2019 Prose - CIS VMware ESXi 6.5 Benchmark v1.0.0
CIS Microsoft IIS 10 Benchmark (1.1.1) Microsoft IIS 10
Center for Internet Security (CIS)
09/24/2019 Prose - CIS Microsoft IIS 10 Benchmark v1.1.1
CIS Microsoft Windows 7 Workstation Benchmark (3.1.0) Microsoft Windows 7
Microsoft Windows 7 32-bit
Microsoft Windows 7 64-bit
Center for Internet Security (CIS)
09/24/2019 Prose - CIS Microsoft Windows 7 Workstation Benchmark v3.1.0
Solaris 9 (Ver 1, Rel 12) Sun Solaris 9
Sun Solaris 9 SPARC
Defense Information Systems Agency
09/12/2019 SCAP 1.1 Content - Sunset - Solaris 9 SPARC STIG Benchmark - Ver 1, Rel 12
Standalone XCCDF 1.1.4 - Sunset - Solaris 9 SPARC Manual STIG - Ver 1, Rel 9
Standalone XCCDF 1.1.4 - Sunset - Solaris 9 x86 Manual STIG - Ver 1, Rel 9
Symantec Endpoint Protection 12.1 Managed Client STIG (Version 1, Release 4) Symantec Endpoint Protection 12.1
Defense Information Systems Agency
09/12/2019 Standalone XCCDF 1.1.4 - Sunset - Symantec Endpoint Protection 12.1 Managed Client STIG - Ver 1, Rel 4
LG Android 6.x STIG (Version 1, Release 2) Mobile Device Manager for the Blackberry Enterprise Server
Defense Information Systems Agency
09/12/2019 Standalone XCCDF 1.1.4 - Sunset - LG Android 6.x STIG Ver 1, Rel 1
Standalone XCCDF 1.1.4 - Sunset - LG Android 6.x STIG - Ver 1, Rel 2
Samsung Android OS 6 (with Knox 2.x) STIG (Ver 1, Rel 3) Samsung Android OS 6
Defense Information Systems Agency
09/12/2019 Standalone XCCDF 1.1.4 - Sunset - Samsung Android OS 6 with Knox 2.x STIG - Ver 1, Rel 3
Citrix XenApp STIG (Version 1, Release 1.4) Citrix Presentation Server
Citrix XenApp 5.0
Citrix XenApp Server 4.5
Defense Information Systems Agency
09/12/2019 Prose - Sunset - Citrix XenApp STIG - Ver 1, Rel 1.4
Apple OSX 10.10 (Yosemite) Workstation (STIG) (Version 1, Release 5) Apple OS X 10.10
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Apple OS X 10.10 Workstation STIG - Ver 1, Rel 5
Apache 2.0 STIG - Windows (Version 1, Release 5) Apache HTTP Server 2.0
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Apache 2.0 Windows STIG - Ver 1, Rel 5
Oracle 10 STIG (Version 8 Release 1.11) Oracle Database 10g
Oracle Database 10g 10.1
Oracle Database 10g 10.2
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Oracle 10g Database STIG - Ver 8, Rel 1.11
Access 2007 STIG (Version 4, Release 15) Microsoft Access 2007
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Microsoft Access 2007 STIG - Ver 4, Rel 15
Web Policy STIG (Version 1, Release 1) Apache HTTP Server 1.3
Apache HTTP Server 2.0
Apache HTTP Server 2.2
Microsoft Internet Information Services
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Web Policy STIG - Ver 1, Rel 1
* This checklist is still undergoing review for inclusion into the NCP.