National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 513 matching records. Displaying matches 141 through 160.

Name (Version) Target Authority Last Modified Resources
IBM AIX 7.x STIG (Ver 1, Rel 2) IBM AIX 7.1
IBM AIX 7.2
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - IBM AIX 7.x STIG - Ver 1, Rel 2
IBM DataPower STIG (Ver 1, Rel 2) IBM DataPower
Defense Information Systems Agency
06/06/2019 Standalone XCCDF 1.1.4 - IBM DataPower STIG ALG STIG Ver 1
Standalone XCCDF 1.1.4 - IBM DataPower NDM STIG - Ver 1, Rel 2
IBM DB2 V10-5 LUW STIG (Ver 1, Rel 4) IBM DB2 V10-5 for Linux, Unix, and Windows (LUW)
Defense Information Systems Agency
11/01/2019 Standalone XCCDF 1.1.4 - IBM DB2 V10.5 STIG - Ver 1, Rel 4
IBM Hardware Management Console (HMC) STIG (Version 1, Release 5) IBM z/OS Version 1 Release 10
IBM z/OS Version 1 Release 11
IBM z/OS Version 1 Release 12
Defense Information Systems Agency
06/06/2019 Standalone XCCDF 1.1.4 - IBM Hardware Management Console (HMC) STIG - Ver 1, Rel 5
IBM MaaS360 with Watson v10-x MDM STIG (Ver 1, Rel 2) IBM MaaS360 MDM
Defense Information Systems Agency
10/28/2019 Standalone XCCDF 1.1.4 - IBM MaaS360 with Watson v10-x MDM STIG - Ver1, Rel 2
IBM MQ Appliance v9-0 STIG (V1) IBM MQ Appliance v9-0
Defense Information Systems Agency
06/07/2019 Standalone XCCDF 1.1.4 - IBM MQ Appliance v9-0 AS STIG V1
Standalone XCCDF 1.1.4 - IBM MQ Appliance v9-0 NDM STIG V1
IBM WebSphere Traditional V9.x STIG (1.0) IBM WebSphere Application Server traditional V9
Defense Information Systems Agency
07/12/2019 Standalone XCCDF 1.1.4 - IBM WebSphere Traditional V9.x STIG Version 1
IBM zVM Using CA VMSecure STIG (Ver 1, Rel 2) IBM zVM Using CA VMSecure
Defense Information Systems Agency
06/07/2019 Standalone XCCDF 1.1.4 - IBM zVM using CA VMSecure STIG - Ver 1, Rel 2
Infoblox 7.x Domain Name System (DNS) STIG (Version 1, Release 8) Infoblox 7.x Domain Name System (DNS)
Defense Information Systems Agency
11/01/2019 Standalone XCCDF 1.1.4 - Infoblox 7.x DNS STIG - Ver 1, Rel 8
IPSEC VPN Gateway STIG (Version 1, Release 16) Juniper IDP Series Intrusion Detection and Prevention Appliance
Juniper ISG Series Integrated Security Gateway
Defense Information Systems Agency
12/12/2019 Standalone XCCDF 1.1.4 - IPSEC VPN Gateway STIG - Ver 1, Rel 16
ISEC7 EMM Suite v6.x STIG (Ver 1, Rel 1) iSEC7 Enterprise Mobility Management 6.0
Defense Information Systems Agency
10/28/2019 Standalone XCCDF 1.1.4 - ISEC7 EMM Suite v6.x STIG - Ver 1, Rel 1
Java Runtime Environment (JRE) 6 (Version 1, Release 5) Sun JRE 1.6.0
Defense Information Systems Agency
08/15/2017 Standalone XCCDF 1.1.4 - Java Runtime Environment (JRE) 6, Version 1, Release 5
Java Runtime Environment (JRE) 7 (Version 1, Release 5) Oracle Java Runtime Environment (JRE) 1.7.0
Defense Information Systems Agency
08/15/2017 Standalone XCCDF 1.1.4 - Java Runtime Environment (JRE) 7 - Version 1, Release 5
Juniper Router STIG (Version 1, Release 4) Juniper JunOS
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - Juniper Router STIG
Juniper SRX Services Gateway (SG) STIG (Ver 1, Rel 4) Juniper SRX Services Gateway (SG)
Defense Information Systems Agency
08/12/2019 Standalone XCCDF 1.1.4 - Juniper SRX Services Gateway (SG) Application Layer Gateway (ALG) STIG - Ver 1, Rel 4
Standalone XCCDF 1.1.4 - Juniper SRX Services Gateway (SG) Intrusion Detection and Prevention System (IDPS) STIG - Ver 1, Rel 2
Standalone XCCDF 1.1.4 - Juniper SRX Services Gateway (SG) Network Device Management (NDM) STIG - Ver 1, Rel 3
Standalone XCCDF 1.1.4 - Juniper SRX Services Gateway (SG) Virtual Private Network (VPN) STIG - Ver 1, Rel 2
Keyboard Video and Mouse Switch STIG (Version 2, Release 6) Dell KVM 2161DS_2
Defense Information Systems Agency
12/12/2019 Standalone XCCDF 1.1.4 - Keyboard Video and Mouse Switch STIG - Ver 2, Rel 6
LG Android 5.0 ISCG (Version 1, Release 2) LG Android 5.0
Defense Information Systems Agency
07/03/2018 Standalone XCCDF 1.1.4 - LG Android 5.0 ISCG Version 1, Release 2
Macintosh Operating System X 10.5 (Version 1, Release 2) Apple Mac OS X 10.5
Defense Information Systems Agency
08/15/2017 Standalone XCCDF 1.1.4 - Mac OS X 10.5 STIG, Version 1, Release 2
McAfee Antivirus Security Guidance (Version 4, Release 10) Mcafee VirusScan 7.0
Mcafee VirusScan 8.0.0
Defense Information Systems Agency
05/16/2018 Standalone XCCDF 1.1.4 - McAfee Antivirus Security Guidance - Version 4, Release 10
McAfee Application Control STIG (Ver 1, Rel 6) McAfee Application Control 7.0.0
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - McAfee Application Control STIG - Ver 1, Rel 3
Standalone XCCDF 1.1.4 - McAfee Application Control 8.x STIG - Ver 1, Rel 6
* This checklist is still undergoing review for inclusion into the NCP.