National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 533 matching records. Displaying matches 21 through 40.


Name (Version) Target Product Category Authority Last Modified Resources
Microsoft Windows Server 2016 STIG (Version 1, Release 5) Microsoft Windows Server 2016 Defense Information Systems Agency 09/06/2018 SCAP 1.2 Content - Microsoft Windows Server 2016 STIG Benchmark - Ver 1, Rel 6
GPOs - Group Policy Objects (GPOs) - July 2018
Standalone XCCDF 1.1.4 - Microsoft Windows Server 2016 STIG MS DC - Ver 1, Rel 5
Microsoft Publisher 2016 STIG (Version 1, Release 3) Microsoft Publisher 2013
Microsoft Publisher 2016
Desktop Application
Office Suite
Defense Information Systems Agency 09/07/2018 SCAP 1.2 Content - Microsoft Publisher 2016 STIG Benchmark - Ver 1, Rel 3 (SCC tool use only)
GPOs - Group Policy Objects (GPOs) - July 2018
Standalone XCCDF 1.1.4 - Microsoft Publisher 2016 STIG - Ver 1, Rel 3
Microsoft Office System 2016 STIG (Version 1, Release 1) Microsoft Office 2016 Office Suite Defense Information Systems Agency 09/07/2018 SCAP 1.2 Content - Microsoft Office System 2016 STIG Benchmark - Ver 1, Rel 2 (SCC tool use only)
GPOs - Group Policy Objects (GPOs) - July 2018
Standalone XCCDF 1.1.4 - Microsoft Office System 2016 STIG - Version 1, Release 1
Microsoft Windows Defender Antivirus STIG (Ver 1, Rel 4) Microsoft Windows Defender Malware Defense Information Systems Agency 09/07/2018 SCAP 1.2 Content - Microsoft Windows Defender Antivirus STIG Benchmark - Ver 1, Rel 1
GPOs - Group Policy Objects (GPOs) - July 2018
Standalone XCCDF 1.1.4 - Microsoft Windows Defender Antivirus STIG - Ver 1, Rel 4
HP-UX 11.31 STIG (Version 1, Release 17) HP HP-UX 11.31 Operating System Defense Information Systems Agency 08/24/2018 SCAP 1.2 Content - HP-UX 11.31 STIG Benchmark - Ver 1, Rel 16
Standalone XCCDF 1.1.4 - HP-UX 11.31 Manual STIG - Ver 1, Rel 17
Microsoft Office 2013 STIG (Version 1 Release 3) Microsoft Office 2013 Office Suite Defense Information Systems Agency 05/25/2018 SCAP 1.2 Content - Microsoft Office System 2013 STIG Benchmark - Ver 1, Rel 5 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Office 2013 STIG - Version 1 Release 3
Prose - Microsoft Office 2013 Overview - Version 1, Release 5
Windows 2008 STIG (Version 6, Release 41) Microsoft Windows Defender
Microsoft Internet Explorer
Microsoft Windows Mail
Microsoft Windows Media Player
Microsoft Windows Server 2008
Malware
Web Browser
Desktop Application
Operating System
Defense Information Systems Agency 09/06/2018 SCAP 1.2 Content - Microsoft Windows 2008 DC STIG Benchmark - Ver 6, Rel 42
SCAP 1.2 Content - Microsoft Windows 2008 MS STIG Benchmark - Ver 6, Rel 42
Standalone XCCDF 1.1.4 - Microsoft Windows 2008 DC STIG - Ver 6, Rel 41
Standalone XCCDF 1.1.4 - Microsoft Windows 2008 MS STIG - Ver 6, Rel 41
Microsoft Windows 7 (Version 1, Release 30) Microsoft Windows 7 Operating System Defense Information Systems Agency 04/25/2018 SCAP 1.2 Content - Microsoft Windows 7 STIG Benchmark - Ver 1, Rel 36
Standalone XCCDF 1.1.4 - Microsoft Windows 7 STIG - Ver 1, Rel 30
Prose - Microsoft Windows 7 STIG Release Memo
Windows 8/8.1 STIG (Version 1, Release 21) Microsoft Windows 8 x86 (32-bit)
Microsoft Windows 8 x64 (64-bit)
Microsoft Windows 8.1 (x64)
Microsoft Windows 8.1 (x86)
Operating System Defense Information Systems Agency 04/25/2018 SCAP 1.2 Content - Microsoft Windows 8/8.1 STIG Benchmark - Ver 1, Rel 22
Standalone XCCDF 1.1.4 - Microsoft Windows 8/8.1 STIG - Ver 1, Rel 21
Red Hat 6 STIG (Version 1, Release 19) Red Hat Enterprise Linux 6 Operating System Defense Information Systems Agency 08/24/2018 SCAP 1.2 Content - Red Hat Enterprise Linux 6 STIG Benchmark - Ver 1, Rel 20
Standalone XCCDF 1.1.4 - Red Hat Enterprise Linux 6 STIG - Ver 1, Rel 19
Red Hat 7 STIG (Ver 1, Rel 4) Red Hat Enterprise Linux 7.0 Defense Information Systems Agency 03/16/2018 SCAP 1.2 Content - Red Hat Enterprise Linux 7 STIG Benchmark - Ver 1, Rel 2
Standalone XCCDF 1.1.4 - Red Hat Enterprise Linux 7 STIG - Ver 1, Rel 4
Solaris 10 (Version 1, Release 22) Sun Solaris 10 SPARC
Sun Solaris 10
Operating System Defense Information Systems Agency 05/25/2018 SCAP 1.2 Content - Solaris 10 SPARC STIG Benchmark - Ver 1, Rel 20
SCAP 1.2 Content - Solaris 10 x86 STIG Benchmark - Ver 1, Rel 20
Standalone XCCDF 1.1.4 - Solaris 10 SPARC Manual STIG - Ver 1, Rel 22
Standalone XCCDF 1.1.4 - Solaris 10 x86 Manual STIG - Ver 1, Rel 22
Solaris 10 (SPARC and x86) Manual STIG (Version 1, Release 23) Oracle Solaris 10 Operating System Defense Information Systems Agency 08/24/2018 SCAP 1.2 Content - Solaris 10 SPARC STIG Benchmark - Ver 1, Rel 20
SCAP 1.2 Content - Solaris 10 x86 STIG Benchmark - Ver 1, Rel 21
Standalone XCCDF 1.1.4 - Solaris 10 SPARC Manual STIG - Ver 1, Rel 23
Standalone XCCDF 1.1.4 - Solaris 10 x86 Manual STIG - Ver 1, Rel 23
Solaris 11 (SPARC and x86) Manual STIG (Version 1, Release 15) Sun Solaris Operating System Defense Information Systems Agency 08/24/2018 SCAP 1.2 Content - Solaris 11 SPARC STIG Benchmark - Ver 1, Rel 9
SCAP 1.2 Content - Solaris 11 x86 STIG Benchmark - Ver 1, Rel 9
Standalone XCCDF 1.1.4 - Solaris 11 SPARC Manual STIG - Ver 1, Rel 15
Standalone XCCDF 1.1.4 - Solaris 11 X86 Manual STIG - Ver 1, Rel 15
Adobe Acrobat Reader X Secure Configuration Benchmark (10.1.1) Adobe Acrobat Reader Desktop Application National Security Agency 09/05/2014 SCAP 1.1 Content - Adobe Reader X 10.1.1
AIX 5.3 STIG (Version 1, Release 2) IBM AIX 5.3 Operating System Defense Information Systems Agency 08/15/2017 SCAP 1.1 Content - AIX 5.3 STIG Benchmark, Version 1, Release 2
SCAP 1.0 Content - AIX 5.3 STIG Benchmark, Version 1, Release 1
Standalone XCCDF 1.1.4 - AIX 5.3 STIG Manual Version 1, Release 2
AIX 6.1 STIG (Version 1, Release 13) IBM AIX 6.1 Operating System Defense Information Systems Agency 05/25/2018 SCAP 1.1 Content - AIX 6.1 STIG-Benchmark - Ver 1, Rel 9
Standalone XCCDF 1.1.4 - AIX 6.1 STIG - Ver 1, Rel 13
OneNote 2013 STIG (Version 1, Release 3) Microsoft OneNote 2013 Desktop Application Defense Information Systems Agency 09/07/2018 SCAP 1.1 Content - Microsoft OneNote 2013 STIG Benchmark - Version 1, Release 1 (SCC tool use only)
GPOs - Group Policy Objects (GPOs) - July 2018
Standalone XCCDF 1.1.4 - Microsoft OneNote 2013 STIG - Ver 1, Rel 3
Excel 2013 STIG (Version 1, Release 7) Microsoft Excel 2013 Desktop Application Defense Information Systems Agency 09/07/2018 SCAP 1.1 Content - Microsoft Excel 2013 STIG Benchmark - Ver 1, Rel 4 (SCC tool use only)
GPOs - Group Policy Objects (GPOs) - July 2018
Standalone XCCDF 1.1.4 - Microsoft Excel 2013 STIG - Ver 1, Rel 7
Infopath 2013 STIG (Version 1, Release 5) Microsoft Infopath 2013 Desktop Application Defense Information Systems Agency 09/07/2018 SCAP 1.1 Content - Microsoft InfoPath 2013 STIG Benchmark - Ver 1, Rel 3 (SCC tool use only)
GPOs - Group Policy Objects (GPOs) - July 2018
Standalone XCCDF 1.1.4 - Microsoft InfoPath 2013 STIG - Ver 1, Rel 5
* This checklist is still undergoing review for inclusion into the NCP.