National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 517 matching records. Displaying matches 21 through 40.


Name (Version) Target Product Category Authority Last Modified Resources
Windows 2008 STIG (Version 6, Release 40) Microsoft Windows Defender
Microsoft Internet Explorer
Microsoft Windows Mail
Microsoft Windows Media Player
Microsoft Windows Server 2008
Malware
Web Browser
Desktop Application
Operating System
Defense Information Systems Agency 05/27/2018 SCAP 1.2 Content - Microsoft Windows 2008 DC STIG Benchmark - Ver 6, Rel 41
SCAP 1.2 Content - Microsoft Windows 2008 MS STIG Benchmark - Ver 6, Rel 41
Standalone XCCDF 1.1.4 - Microsoft Windows 2008 DC STIG - Ver 6, Rel 40
Standalone XCCDF 1.1.4 - Microsoft Windows 2008 MS STIG - Ver 6, Rel 40
Microsoft Windows 2008 R2 STIG (Version 1, Release 26) Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008 r2 Itanium
Microsoft Windows Server 2008 r2 x64
Microsoft Windows Server 2008 R2 Service Pack 1
Microsoft Windows Server 2008 r2 Service Pack 1 Itanium
Microsoft Windows Server 2008 r2 x64 Service Pack 1
Operating System Defense Information Systems Agency 05/25/2018 SCAP 1.2 Content - Microsoft Windows 2008 R2 DC STIG Benchmark - Ver 1, Rel 28
SCAP 1.2 Content - Microsoft Windows 2008 R2 MS STIG Benchmark - Ver 1, Rel 29
Standalone XCCDF 1.1.4 - Microsoft Windows 2008 R2 DC STIG - Ver 1, Rel 26
Standalone XCCDF 1.1.4 - Microsoft Windows 2008 R2 MS STIG - Ver 1, Rel 26
Windows Server 2012 / 2012 R2 STIG (Version 2, Release 12) Microsoft Windows Server 2012/2012 R2 Defense Information Systems Agency 05/25/2018 SCAP 1.2 Content - Microsoft Windows 2012 and 2012 R2 DC STIG Benchmark - Ver 2, Rel 12
SCAP 1.2 Content - Microsoft Windows 2012 and 2012 R2 MS STIG Benchmark - Ver 2, Rel 12
Standalone XCCDF 1.1.4 - Microsoft Windows 2012 and 2012 R2 DC STIG - Ver 2, Rel 12
Standalone XCCDF 1.1.4 - Microsoft Windows 2012 and 2012 R2 MS STIG - Ver 2, Rel 12
Microsoft Windows 7 (Version 1, Release 30) Microsoft Windows 7 Operating System Defense Information Systems Agency 04/25/2018 SCAP 1.2 Content - Microsoft Windows 7 STIG Benchmark - Ver 1, Rel 36
Standalone XCCDF 1.1.4 - Microsoft Windows 7 STIG - Ver 1, Rel 30
Prose - Microsoft Windows 7 STIG Release Memo
Windows 8/8.1 STIG (Version 1, Release 21) Microsoft Windows 8 x86 (32-bit)
Microsoft Windows 8 x64 (64-bit)
Microsoft Windows 8.1 (x64)
Microsoft Windows 8.1 (x86)
Operating System Defense Information Systems Agency 04/25/2018 SCAP 1.2 Content - Microsoft Windows 8/8.1 STIG Benchmark - Ver 1, Rel 22
Standalone XCCDF 1.1.4 - Microsoft Windows 8/8.1 STIG - Ver 1, Rel 21
Microsoft Windows Defender Antivirus STIG (Ver 1, Rel 4) Microsoft Windows Defender Malware Defense Information Systems Agency 05/27/2018 SCAP 1.2 Content - Microsoft Windows Defender Antivirus STIG Benchmark - Ver 1, Rel 1
Standalone XCCDF 1.1.4 - Microsoft Windows Defender Antivirus STIG - Ver 1, Rel 4
Microsoft Windows Server 2016 STIG (Version 1, Release 4) Microsoft Windows Server 2016 Defense Information Systems Agency 05/27/2018 SCAP 1.2 Content - Microsoft Windows Server 2016 STIG Benchmark - Ver 1, Rel 5
Standalone XCCDF 1.1.4 - Microsoft Windows Server 2016 STIG MS DC - Ver 1, Rel 4
Red Hat 6 STIG (Version 1, Release 19) Red Hat Enterprise Linux 6 Operating System Defense Information Systems Agency 05/25/2018 SCAP 1.2 Content - Red Hat Enterprise Linux 6 STIG Benchmark - Ver 1, Rel 19
Standalone XCCDF 1.1.4 - Red Hat Enterprise Linux 6 STIG - Ver 1, Rel 19
Red Hat 7 STIG (Ver 1, Rel 4) Red Hat Enterprise Linux 7.0 Defense Information Systems Agency 03/16/2018 SCAP 1.2 Content - Red Hat Enterprise Linux 7 STIG Benchmark - Ver 1, Rel 2
Standalone XCCDF 1.1.4 - Red Hat Enterprise Linux 7 STIG - Ver 1, Rel 4
Solaris 10 (Version 1, Release 22) Sun Solaris 10 SPARC
Sun Solaris 10
Operating System Defense Information Systems Agency 05/25/2018 SCAP 1.2 Content - Solaris 10 SPARC STIG Benchmark - Ver 1, Rel 20
SCAP 1.2 Content - Solaris 10 x86 STIG Benchmark - Ver 1, Rel 20
Standalone XCCDF 1.1.4 - Solaris 10 SPARC Manual STIG - Ver 1, Rel 22
Standalone XCCDF 1.1.4 - Solaris 10 x86 Manual STIG - Ver 1, Rel 22
Adobe Acrobat Reader X Secure Configuration Benchmark (10.1.1) Adobe Acrobat Reader Desktop Application National Security Agency 09/05/2014 SCAP 1.1 Content - Adobe Reader X 10.1.1
AIX 5.3 STIG (Version 1, Release 2) IBM AIX 5.3 Operating System Defense Information Systems Agency 08/15/2017 SCAP 1.1 Content - AIX 5.3 STIG Benchmark, Version 1, Release 2
SCAP 1.0 Content - AIX 5.3 STIG Benchmark, Version 1, Release 1
Standalone XCCDF 1.1.4 - AIX 5.3 STIG Manual Version 1, Release 2
AIX 6.1 STIG (Version 1, Release 13) IBM AIX 6.1 Operating System Defense Information Systems Agency 05/25/2018 SCAP 1.1 Content - AIX 6.1 STIG-Benchmark - Ver 1, Rel 9
Standalone XCCDF 1.1.4 - AIX 6.1 STIG - Ver 1, Rel 13
HP-UX 11.31 STIG (Version 1, Release 17) HP HP-UX 11.31 Operating System Defense Information Systems Agency 05/27/2018 SCAP 1.1 Content - HP-UX 11.31 STIG Benchmark - Ver 1, Rel 15
Standalone XCCDF 1.1.4 - HP-UX 11.31 Manual STIG - Ver 1, Rel 17
IBM Tivoli Identity Manager Security Guide (4.6) IBM Tivoli Identity Manager 4.6 Identity Management National Security Agency
MITRE
07/11/2011 SCAP 1.1 Content - IBM Tivoli Identity Manager 4.6 Security Guide
JBoss Enterprise Application Platform (EAP) (5.x) Red Hat JBoss Enterprise Application Platform 5.0.0
Red Hat JBoss Enterprise Application Platform 5.0.1
Red Hat JBoss Enterprise Application Platform 5.1.0
Red Hat JBoss Enterprise Application Platform 5.1.1
Red Hat JBoss Enterprise Application Platform 5.1.2
Web Server
Application Server
Red Hat 10/23/2017 SCAP 1.1 Content - JBoss Enterprise Application Platform (EAP)
Microsoft .NET Framework 4 (Version 1, Release 4) Microsoft .NET Framework 4.0 Application Server Defense Information Systems Agency 02/27/2018 SCAP 1.1 Content - Microsoft .NET Framework 4 Benchmark - Ver 1, Rel 4 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft .Net Framework 4 STIG - Ver 1, Rel 4
Microsoft .Net Framework 4 STIG (Ver 1, Rel 4) Microsoft .NET Framework Application Server Defense Information Systems Agency 03/30/2018 SCAP 1.1 Content - Microsoft .NET Framework 4 Benchmark - Ver 1, Rel 4 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft .Net Framework 4 STIG - Ver 1, Rel 4
Access 2010 STIG (Version 1, Release 10) Microsoft Access 2010 Desktop Application Defense Information Systems Agency 05/27/2018 SCAP 1.1 Content - Microsoft Access 2010 STIG Benchmark - Ver 1, Rel 2 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Access 2010 STIG - Ver 1, Rel 10
Microsoft Access 2013 STIG (Version 1, Release 6) Access 2013 Desktop Application Defense Information Systems Agency 05/25/2018 SCAP 1.1 Content - Microsoft Access 2013 STIG Benchmark - Ver 1, Rel 2 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Access 2013 STIG - Ver 1, Rel 6
* This checklist is still undergoing review for inclusion into the NCP.