National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 552 matching records. Displaying matches 321 through 340.

Name (Version) Target Authority Last Modified Resources
Apple OS X 10.9 Workstation STIG (Ver 1, Rel 2) Apple OS X 10.9
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Apple OS X 10.9 Workstation STIG - Ver 1, Rel 2
DNS Policy STIG (Ver 4, Rel 1.22) Cisco Content Services Switch 11000
ISC Bind 9.3.1
ISC Bind 9.3.2
Microsoft Windows 2000
Microsoft Windows Server 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - DNS Policy STIG - Ver 4, Rel 1.22
Outlook 2007 STIG (Version 4, Release 16) Microsoft Outlook 2007
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Microsoft Outlook 2007 STIG - Ver 4, Rel 16
BlackBerry (OS7 and BES5) STIG (Version 2, Release 11) Research In Motion (RIM) Blackberry Enterprise Server (BES) 5.0.4
Research In Motion (RIM) Blackberry OS 5.0
Research In Motion (RIM) Blackberry OS 6.0
Research In Motion (RIM) Blackberry OS 7.0
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - BlackBerry Enterprise Server 5 STIG - Ver 2, Rel 10
Standalone XCCDF 1.1.4 - Sunset - BlackBerry for the OS 7 STIG - Ver 2, Rel 11
Bind Domain Name System STIG (Version 4, Release 1.20) ISC Bind 9.2.4
ISC Bind 9.3.1
ISC Bind 9.3.2
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - BIND DNS STIG - Ver 4, Rel 1.20
Windows 2003 DC STIG Benchmark (Version 6, Release 40) Microsoft Windows Server 2003
Microsoft Windows Server 2003 Service Pack 1
Microsoft Windows Server 2003 Service Pack 2
Microsoft Windows Server 2003 Service Pack 3
Defense Information Systems Agency
09/11/2019 SCAP 1.1 Content - Sunset - Microsoft Windows 2003 DC STIG Benchmark - Ver 6, Rel 40
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2003 DC STIG - Ver 6, Rel 37
Defense Switched Network (DSN) (Version 2, Release 8) Cisco Content Services Switch 11000
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Defense Switch Network (DSN) STIG - Ver 2, Rel 8
Microsoft Office 2003 STIG (Version 4 Release 4) Microsoft Access 2003
Microsoft Excel 2003
Microsoft InfoPath 2003
Microsoft Outlook 2003
Microsoft PowerPoint 2003
Microsoft Word 2003
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Microsoft Office 2003 STIG - Ver 4, Rel 4
Microsoft SharePoint 2010 STIG (Version 1, Release 9) Microsoft SharePoint Server 2010
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Microsoft SharePoint 2010 STIG - Ver 1, Rel 9
Internet Explorer 6 STIG (Version 4, Release 11) Microsoft Internet Explorer 6
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Microsoft Internet Explorer 6 STIG - Ver 4, Rel 11
Word 2007 STIG (Version 4, Release 15) Microsoft Word 2007
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Microsoft Word 2007 STIG - Ver 4, Rel 15
L3 KOV-26 Talon (Wireless Role) STIG (Version 6, Release 8) L3 KOV-26 Talon
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - L3 KOV-26 Talon (Wireless Role) STIG - Ver 6, Rel 8
HP-UX 11.31 STIG (Version 1, Release 19) HP HP-UX 11.31
Defense Information Systems Agency
09/11/2019 SCAP 1.2 Content - Sunset - HP-UX 11.31 STIG Benchmark - Ver 1, Rel 17
Standalone XCCDF 1.1.4 - Sunset - HP-UX 11.31 STIG - Ver 1, Rel 19
Symantec Endpoint Protection 12.1 Overview (Version 1, Release 1) Symantec Endpoint Protection 12.1
Defense Information Systems Agency
09/11/2019 Prose - Sunset - Symantec Endpoint Protection 12.1 Overview - Ver 1, Rel 1
Android 2.2 (Dell) (Version 1, Release 2) Google Android 2.2
Defense Information Systems Agency
09/11/2019 Machine-Readable Format - Sunset - Android 2.2 (DELL) STIG - Ver 1, Rel 2
IIS 6.0 STIG (Version 6, Release 16) Microsoft Internet Information Services 6.0
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Microsoft IIS 6.0 STIG - Ver 6, Rel 16
Symantec Endpoint Protection 12.1 Local Client STIG (Version 1, Release 3) Symantec Endpoint Protection 12.1
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Symantec Endpoint Protection 12.1 Local Client STIG - Ver 1, Rel 3
Samsung Android OS 5 (with Knox 2.x) STIG (Ver 1, Rel 4) Samsung Android OS 5
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Samsung Android OS 5 with Knox 2.x STIG - Ver 1, Rel 4
Apple iOS 10 STIG (Version 1, Release 3) Apple iOS 10
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Apple iOS 10 STIG - Ver 1, Rel 3
Apache 2.0 STIG - UNIX (Version 1, Release 5) Apache HTTP Server 2.0
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Apache 2.0 UNIX STIG - Ver 1, Rel 5
* This checklist is still undergoing review for inclusion into the NCP.