National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 527 matching records. Displaying matches 141 through 160.

Name (Version) Target Authority Last Modified Resources
DoD Consensus Security Configuration Checklist for Microsoft IE 8 (1.0) Microsoft Internet Explorer 8
Department of Defense
03/12/2020 Prose - D0D IE 8 security recommendations
DoD Consensus Security Configuration Checklist for Apple Mac OS 10.5 (Leopard) (1.0) Apple Mac OS X 10.5
Department of Defense
03/12/2020 Prose - Apple Mac OS 10.5 security recommendations
DoD - Microsoft Internet Explorer 9 Settings (31May2011) Microsoft Internet Explorer 9
Department of Defense
03/12/2020 Prose - Microsoft Internet Explorer - Final Draft DoD Internet Explorer 9 Settings
DoD - Microsoft Office 2010 Settings (21April2011) Microsoft Office 2010
Department of Defense
03/12/2020 GPOs - Microsoft Office 2010 Version 1.0 - DRAFT Office 2010 GPO
Prose - Microsoft Office 2010 - DoD Master Office 2010 Settings
Microsoft Windows 2008 Server DNS STIG (Version 1, Release 8) Windows 2008 Server DNS
Defense Information Systems Agency
03/05/2020 Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 Server DNS STIG - Ver 1, Rel 8
SQL Server 2012 STIG (Version 1, Release 20) Microsoft SQL Server 2012
Defense Information Systems Agency
02/19/2020 Standalone XCCDF 1.1.4 - Sunset - Microsoft SQL Server 2012 STIG - Ver 1, Rel 20
CIS MongoDB 3.6 Benchmark (1.0.0) MongoDB 3.6
Center for Internet Security (CIS)
02/03/2020 Prose - CIS MongoDB 3.6 Benchmark v1.0.0
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.39) IBM z/OS Version 2.1
IBM z/OS Version 2.2
IBM z/OS Version 2.3
Vanguard Integrity Professionals, Inc.
01/30/2020 ZIP - Vanguard z/OS RACF Checklist 6.39(PDF version)
ZIP - Vanguard z/OS RACF Checklist 6.39(XML version)
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.41) IBM Z/OS 2.2
IBM Z/OS 2.3
Vanguard Integrity Professionals, Inc.
01/29/2020 ZIP - Vanguard z/OS RACF Checklist 6.41PDF version)
ZIP - ZIP - Vanguard z/OS RACF Checklist 6.41(XML version)
Vanguard Configuration Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.36) IBM z/OS Version 2, Release 1
IBM z/OS Version 2, Release 2
Vanguard Integrity Professionals, Inc.
01/29/2020 Standalone XCCDF 1.1.4 - Vanguard z/OS RACF Checklist 6.36(XML version)
ZIP - Vanguard z/OS RACF Checklist 6.36(PDF version)
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.37) IBM z/OS Version 2, Release 1
IBM z/OS Version 2, Release 2
Vanguard Integrity Professionals, Inc.
01/29/2020 ZIP - Vanguard z/OS RACF Checklist 6.37(PDF version)
ZIP - Vanguard z/OS RACF Checklist 6.37(XML version)
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.38) IBM z/OS Version 2.1
IBM z/OS Version 2.2
IBM z/OS Version 2.3
Vanguard Integrity Professionals, Inc.
01/29/2020 ZIP - Vanguard z/OS RACF Checklist 6.38(PDF version)
ZIP - Vanguard z/OS RACF Checklist 6.38(XML version)
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.40) IBM Z/OS 2.2
IBM Z/OS 2.3
IBM z/OS Version 2.1
Vanguard Integrity Professionals, Inc.
01/29/2020 ZIP - Vanguard z/OS RACF Checklist 6.40(PDF version)
ZIP - Vanguard z/OS RACF Checklist 6.40(XML version)
Palo Alto Networks Network Device Management (NDM) STIG (Ver 1, Rel 4) Palo Alto Networks Network Device Management (NDM)
Defense Information Systems Agency
01/22/2020 Standalone XCCDF 1.1.4 - Palo Alto Networks STIG
Palo Alto Networks Intrusion Detection and Prevention System (IDPS) STIG (Version 1, Release 4) Palo Alto Networks Intrusion Detection and Prevention System
Defense Information Systems Agency
01/22/2020 Standalone XCCDF 1.1.4 - Palo Alto Networks STIG
Palo Alto Networks Application Layer Gateway (ALG) STIG (Version 1, Release 5) Palo Alto Networks Application Layer Gateway (ALG)
Defense Information Systems Agency
01/22/2020 Standalone XCCDF 1.1.4 - Palo Alto Networks STIG
Microsoft Exchange Server 2013 (Version 1, Release 6) Microsoft Exchange Server 2013
Defense Information Systems Agency
01/21/2020 Standalone XCCDF 1.1.4 - Microsoft Exchange 2013 STIG
Google Android 10.x STIG (Ver 1, Rel 2) Google Android 10.0
Defense Information Systems Agency
01/21/2020 Standalone XCCDF 1.1.4 - Google Android 10.x STIG - Ver 1, Rel 2
Apple OS X 10.12 STIG (Version 1, Release 6) Apple OS X 10.12
Defense Information Systems Agency
01/17/2020 Standalone XCCDF 1.1.4 - Sunset - Apple OS X 10.12 STIG - Ver 1, Rel 6
BlackBerry OS 10.3.x STIG (Version 1, Release 4) Blackberry OS 10.3
Defense Information Systems Agency
01/17/2020 Standalone XCCDF 1.1.4 - Sunset - BlackBerry OS 10.3x STIG - Ver 1, Rel 4
* This checklist is still undergoing review for inclusion into the NCP.