National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 516 matching records. Displaying matches 201 through 220.

Name (Version) Target Authority Last Modified Resources
Outlook 2010 STIG (Version 1, Release 13) Microsoft Outlook 2010
Defense Information Systems Agency
08/30/2019 Standalone XCCDF 1.1.4 - Microsoft Outlook 2010 STIG - Ver 1, Rel 13
PowerPoint 2010 STIG (Version 1, Release 10) Microsoft PowerPoint 2010
Defense Information Systems Agency
08/30/2019 Standalone XCCDF 1.1.4 - Microsoft PowerPoint 2010 STIG - Ver 1, Rel 10
Project 2010 STIG (Version 1, Release 9) Microsoft Project 2010
Defense Information Systems Agency
08/30/2019 Standalone XCCDF 1.1.4 - Microsoft Project 2010 STIG - Ver 1, Rel 9
Publisher 2010 STIG (Version 1, Release 11) Microsoft Publisher 2010
Defense Information Systems Agency
08/30/2019 Standalone XCCDF 1.1.4 - Microsoft Publisher 2010 STIG - Ver 1, Rel 11
Sharepoint 2013 (Version 1, Release 9) Microsoft Sharepoint Server 2013
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Microsoft SharePoint 2013 STIG - Ver 1, Rel 9
Microsoft SQL Server 2014 STIG (Version 1, Release 1) Microsoft SQL Server 2014
Defense Information Systems Agency
04/29/2020 Standalone XCCDF 1.1.4 - Microsoft SQL Server 2014 STIG
Microsoft SQL Server 2016 STIG (Ver 1, Rel 9) Microsoft SQL Server 2016
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Microsoft SQL Server 2016 STIG
Windows Server 2012 DNS STIG (Version 1, Release 15) Microsoft Windows Server 2012 R2
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Microsoft Windows 2012 Server DNS STIG - Ver 1, Rel 15
Microsoft Windows Privileged Access Workstation (PAW) STIG (Version 1, Release 3) Microsoft Windows Dedicated Administrative Workstation
Defense Information Systems Agency
06/09/2020 Standalone XCCDF 1.1.4 - Microsoft Windows Privileged Access Workstation (PAW) STIG - Ver 1, Rel 3
Microsoft Word 2010 STIG (Ver 1, Rel 11) Microsoft Word 2010
Defense Information Systems Agency
08/30/2019 Standalone XCCDF 1.1.4 - Microsoft Word 2010 STIG - Ver 1, Rel 11
Mobile Device Manager to the BES 5 STIG (Version 2, Release 9) Mobile Device Manager for the Blackberry Enterprise Server
Defense Information Systems Agency
05/29/2018 Standalone XCCDF 1.1.4 - Mobile Device Manager to the BES 5 STIG
MobileIron Core v10.x MDM STIG (Ver 1 Rel 1) MobileIron Core 10.0
Defense Information Systems Agency
07/10/2019 Standalone XCCDF 1.1.4 - MobileIron Core v10.x MDM STIG Ver 1 Rel 1
MongoDB Enterprise Advanced 3.x STIG (Ver 1, Rel 2) MongoDB 3.2
MongoDB 3.4
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - MongoDB Enterprise Advanced 3.x STIG - Ver 1, Rel 2
MultiFunction Device and Network Printers STIG (Version 2, Release 14) HP Color Laserjet 4730 MFP
Defense Information Systems Agency
11/01/2019 Standalone XCCDF 1.1.4 - Multifunction Device and Network Printers STIG - Ver 2, Rel 14
Network Firewall (Version 8, Release 25) Cisco PIX ASA
Foundry Networks BigIron Router
Juniper Router M10
Juniper Router M16
Juniper Router M20
Juniper Router M40
Juniper Router M5
Defense Information Systems Agency
04/15/2019 Standalone XCCDF 1.1.4 - Network Firewall STIG - Ver 8, Rel 25
Network Policy (Version 8, Release 17) Cisco PIX ASA
Foundry Networks BigIron Router
Juniper Router M10
Juniper Router M16
Juniper Router M20
Juniper Router M40
Juniper Router M5
Defense Information Systems Agency
04/15/2019 Standalone XCCDF 1.1.4 - Network Policy - Version 8, Release 17
Oracle 11.2g Database STIG (Version 1, Release 19) Oracle Database 11g 11.2
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Oracle 11.2g Database STIG - Ver 1, Rel 19
Oracle 12c Database STIG (Ver 1, Rel 18) Oracle Database 12c
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Oracle Database 12c STIG - Ver 1, Rel 18
Oracle HTTP Server 12.1.3 STIG (Version 1, Release 7) Oracle HTTP Server 12.1.3 STIG, Version 1, Release 1
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Oracle HTTP Server 12.1.3 STIG - Ver 1, Rel 7
Oracle JRE 8 UNIX STIG (Ver 1, Rel 3) Oracle JRE for UNIX
Defense Information Systems Agency
06/14/2019 Standalone XCCDF 1.1.4 - Oracle JRE 8 UNIX STIG - Ver 1, Rel 3
* This checklist is still undergoing review for inclusion into the NCP.