National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 516 matching records. Displaying matches 221 through 240.

Name (Version) Target Authority Last Modified Resources
Oracle JRE 8 Windows STIG (Version 1, Release 5) Oracle JRE 8 for Windows
Defense Information Systems Agency
06/14/2019 Standalone XCCDF 1.1.4 - Oracle JRE 8 Windows STIG - Ver 1, Rel 5
Oracle Linux 5 STIG (Version 1, Release 14) Oracle Linux 5
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - Oracle Linux 5 STIG - Ver 1, Rel 14
Oracle Linux 6 STIG (Version 1, Release 19) Oracle Linux 6
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Oracle Linux 6 STIG - Ver 1, Rel 19
Oracle WebLogic Server 12c STIG (Ver 1, Rel 6) Oracle Weblogic Server
Defense Information Systems Agency
08/12/2019 Standalone XCCDF 1.1.4 - Oracle WebLogic Server 12c STIG - Ver 1, Rel 6
Palo Alto Networks Application Layer Gateway (ALG) STIG (Version 1, Release 5) Palo Alto Networks Application Layer Gateway (ALG)
Defense Information Systems Agency
01/22/2020 Standalone XCCDF 1.1.4 - Palo Alto Networks STIG
Palo Alto Networks Network Device Management (NDM) STIG (Ver 1, Rel 4) Palo Alto Networks Network Device Management (NDM)
Defense Information Systems Agency
01/22/2020 Standalone XCCDF 1.1.4 - Palo Alto Networks STIG
Palo Alto Networks Intrusion Detection and Prevention System (IDPS) STIG (Version 1, Release 4) Palo Alto Networks Intrusion Detection and Prevention System
Defense Information Systems Agency
01/22/2020 Standalone XCCDF 1.1.4 - Palo Alto Networks STIG
PostgreSQL 9.x STIG (Ver 1, Rel 7) PostgreSQL 9.x
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - PostgreSQL 9.x STIG - Ver 1, Rel 7
Red Hat Jboss Enterprise Application Platform (EAP) 6.3 STIG (Ver 1, Rel 5) Red Hat JBoss Enterprise Application Platform 6.3.0
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Red Hat JBoss Enterprise Application Platform (EAP) 6.3 STIG - Ver 1, Rel 5
Remote XenApp ICA Thin Client STIG (Version 2, Release 7) Citrix XenApp
Defense Information Systems Agency
03/05/2018 Standalone XCCDF 1.1.4 - Remote XenApp ICA Thin Client STIG - Version 2, Release 7
Riverbed SteelHead CX v8 STIG (Version 1, Release 1) Riverbed SteelHead CX v8 ALG
Riverbed SteelHead CX v8 NDM
Defense Information Systems Agency
12/19/2019 Standalone XCCDF 1.1.4 - Riverbed SteelHead CX v8 STIG
Samsung Android OS 10 with Knox 3.x STIG (Ver 1, Rel 1) Samsung Android OS 10.0
Defense Information Systems Agency
05/15/2020 Standalone XCCDF 1.1.4 - Samsung Android OS 10 with Knox 3.x STIG - Ver 1, Rel 1
Samsung Android OS 9 (with Knox 3.x) STIG (Ver 1, Rel 1) Samsung Android OS 9.0
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Samsung Android OS 9 with Knox 3.x STIG
Samsung Knox Android 1.0 STIG (Version 2 Release 2) Samsung Knox Android 1.0
Defense Information Systems Agency
08/16/2017 Standalone XCCDF 1.1.4 - Samsung Knox Android 1.0 STIG Version 2 Release 2
Samsung SDS EMM v1.5.x STIG (Version 1, Release 1) Samsung SDS EMM
Defense Information Systems Agency
06/14/2019 Standalone XCCDF 1.1.4 - Samsung SDS EMM v1.5.x STIG - Ver 1, Rel 1
SEL-2740S STIG (Ver 1 Rel 1) SEL Inc SEL-2740S
Defense Information Systems Agency
07/15/2019 Standalone XCCDF 1.1.4 - SEL-2740S STIG Ver 1 Rel 1
SharePoint 2010 (2010) Microsoft SharePoint Server 2010
National Security Agency
12/12/2018 Standalone XCCDF 1.1.4 - SharePoint 2010 Secure Configuration Benchmark
SUSE Linux Enterprise Server (SLES) v11 for System z STIG (Version 1, Release 12) Novell SUSE Enterprise Linux Server 11
Defense Information Systems Agency
06/14/2019 Standalone XCCDF 1.1.4 - SLES V11 for System z STIG - Ver 1, Rel 12
Splunk Enterprise 7.x for Windows STIG (Ver 1, Rel 1) Splunk Enterprise 7.0
Defense Information Systems Agency
07/06/2020 Standalone XCCDF 1.1.4 - Splunk Enterprise 7.x for Windows STIG - Ver 1, Rel 1
Storage Area Network STIG (Version 2, Release 4) ASUS VE278Q 27-Inch LED Monitor
HP Color Laserjet 4730 MFP
Microsoft Comfort Curve Keyboard 2000
Microsoft Comfort Mouse 4500
Defense Information Systems Agency
08/12/2019 Standalone XCCDF 1.1.4 - Storage Area Network STIG - Ver 2, Rel 4
* This checklist is still undergoing review for inclusion into the NCP.