National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 551 matching records. Displaying matches 121 through 140.

Name (Version) Target Authority Last Modified Resources
Sharepoint Designer 2013 STIG (Version 1, Release 3) Microsoft SharePoint Designer 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Sharepoint Designer 2013 STIG - Ver 1, Rel 3
Microsoft Visio 2016 STIG (Version 1, Release 2) Microsoft Visio 2016
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Visio 2016 STIG - Ver 1, Rel 1
Visio 2013 STIG (Version 1, Release 4) Microsoft Visio 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Visio 2013 STIG - Ver 1, Rel 4
Lync 2013 STIG (Version 1, Release 4) Microsoft Lync 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Lync 2013 STIG - Ver 1, Rel 4
Project 2013 STIG (Version 1, Release 4) Microsoft Project 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Project 2013 STIG - Ver 1, Rel 4
OneNote 2013 STIG (Version 1, Release 3) Microsoft OneNote 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft OneNote 2013 STIG - Ver 1, Rel 3
Microsoft Skype for Business 2016 STIG (Version 1, Release 2) Microsoft Skype for Business 2016
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Skype for Business 2016 STIG - Ver 1, Rel 1
Microsoft Access 2016 STIG (Version 1, Release 2) Microsoft Access 2016
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Access 2016 STIG - Ver 1, Rel 1
Microsoft Access 2013 STIG (Version 1, Release 6) Access 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Access 2013 STIG - Ver 1, Rel 6
Microsoft Publisher 2016 STIG (Version 1, Release 4) Microsoft Publisher 2016
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Publisher 2016 STIG - Ver 1, Rel 3
PowerPoint 2013 STIG (Version 1, Release 6) Microsoft Power Point 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft PowerPoint 2013 STIG - Ver 1, Rel 6
Excel 2013 STIG (Version 1, Release 7) Microsoft Excel 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Excel 2013 STIG - Ver 1, Rel 7
Adobe Acrobat Pro DC Classic Track STIG (Ver 2, Rel 1) Adobe Acrobat Pro DC Classic Track
Defense Information Systems Agency
10/29/2020 GPOs - Group Policy Objects (GPOs) - October 2020
Standalone XCCDF 1.1.4 - Sunset - Adobe Acrobat Pro DC Classic Track STIG - Ver 2, Rel 1
McAfee Application Control STIG (Ver 2, Rel 1) McAfee Application Control 7.0.0
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - McAfee Application Control STIG - Ver 1, Rel 3
Standalone XCCDF 1.1.4 - McAfee Application Control 8.x STIG - Ver 2, Rel 1
Palo Alto Networks Network Device Management (NDM) STIG (Ver 2, Rel 1) Palo Alto Networks Network Device Management (NDM)
Defense Information Systems Agency
10/28/2020 Standalone XCCDF 1.1.4 - Palo Alto Networks STIG
F5 BIG-IP 11.x STIG (Ver 1, Rel 5) F5 BIG-IP Access Policy Manager (APM) 11.x STIG
Defense Information Systems Agency
10/28/2020 Standalone XCCDF 1.1.4 - F5 BIG-IP 11.x STIG
Palo Alto Networks Intrusion Detection and Prevention System (IDPS) STIG (Version 2, Release 1) Palo Alto Networks Intrusion Detection and Prevention System
Defense Information Systems Agency
10/27/2020 Standalone XCCDF 1.1.4 - Palo Alto Networks STIG
Palo Alto Networks Application Layer Gateway (ALG) STIG (Version 2, Release 1) Palo Alto Networks Application Layer Gateway (ALG)
Defense Information Systems Agency
10/27/2020 Standalone XCCDF 1.1.4 - Palo Alto Networks STIG
NIST National Checklist for Red Hat Virtualization Host 4.x (content v0.1.48) Red Hat Virtualization Host 4.3
Red Hat
10/26/2020 SCAP 1.3 Content - NIST National Checklist for Red Hat Virtualization Host 4.x
Ansible Playbook - [DRAFT] DISA STIG for Red Hat Virtualization Host (RHVH)
Ansible Playbook - VPP - Protection Profile for Virtualization v. 1.0 for Red Hat Virtualization Hypervisor (RHVH)
Machine-Readable Format - OpenControl-formatted NIST 800-53 responses for Red Hat Virtualization Host 4.x
NIST National Checklist for Red Hat Enterprise Linux 8.x (content v0.1.50) Red Hat Enterprise Linux 8.0
Red Hat Enterprise Linux 8.1
Red Hat Enterprise Linux 8.2
Red Hat
10/26/2020 SCAP 1.3 Content - NIST National Checklist for Red Hat Enterprise Linux 8.x
Ansible Playbook - FBI Criminal Justice Information Services (FBI CJIS)
Ansible Playbook - NIST 800-171 (Controlled Unclassified Information)
Ansible Playbook - Health Insurance Portability and Accountability Act (HIPAA)
Ansible Playbook - NIST National Checklist for RHEL 8.x
Ansible Playbook - PCI-DSS
* This checklist is still undergoing review for inclusion into the NCP.