National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 546 matching records. Displaying matches 221 through 240.

Name (Version) Target Authority Last Modified Resources
CIS Wireless Networks Apple Hardware addendum (v1.0.0) Apple Airport Extreme 4.0.8
Center for Internet Security (CIS)
12/20/2019 Prose - CIS Wireless Networks Apple Hardware addendum v1.0.0
CIS Windows 2000 Professional Level2 Benchmark (v2.2.1) Microsoft Windows 2000 Professional
Center for Internet Security (CIS)
12/20/2019 Prose - CIS Windows 2000 Professional Level2 Benchmark v2.2.1
CIS Novell NetWare Benchmark (v1.0.0) Novell OES
Center for Internet Security (CIS)
12/20/2019 Prose - CIS Novell NetWare Benchmark v1.0.0
CIS Oracle Database 9i/10g Benchmark (v2.0.1) Oracle Database 10g
Oracle Database 9i
Center for Internet Security (CIS)
12/20/2019 Prose - CIS Oracle Database 9i/10g Benchmark v2.0.1
CIS Wireless Networks Cisco Hardware addendum (v1.0.0) Cisco Aironet 1200 Access Point
Center for Internet Security (CIS)
12/20/2019 Prose - CIS Wireless Networks Cisco Hardware addendum v1.0.0
CIS Wireless Networks DLink Hardware addendum (V1.0.0) D-Link DI-624 2.42
Center for Internet Security (CIS)
12/20/2019 Prose - CIS Wireless Networks DLink Hardware addendum v1.0.0
CIS Windows 2000 Level 1 Benchmark (v1.2.2) Microsoft Windows 2000 Professional
Microsoft Windows Server 2000
Center for Internet Security (CIS)
12/20/2019 Prose - CIS Windows 2000 Level 1 Benchmark v1.2.2
CIS Windows 2000 Server Level 2 Benchmark (v2.2.1) Microsoft Windows Server 2000
Center for Internet Security (CIS)
12/20/2019 Prose - CIS Windows 2000 Server Level 2 Benchmark v2.2.1
CIS Novell eDirectory 8.7 Benchmark (v1.0.0) Novell eDirectory 8.7
Center for Internet Security (CIS)
12/20/2019 Prose - CIS Novell eDirectory 8.7 Benchmark v1.0.0
Riverbed SteelHead CX v8 STIG (Version 1, Release 1) Riverbed SteelHead CX v8 ALG
Riverbed SteelHead CX v8 NDM
Defense Information Systems Agency
12/19/2019 Standalone XCCDF 1.1.4 - Riverbed SteelHead CX v8 STIG
Infopath 2013 STIG (Version 1, Release 5) Microsoft Infopath 2013
Defense Information Systems Agency
12/13/2019 Standalone XCCDF 1.1.4 - Microsoft InfoPath 2013 STIG - Ver 1, Rel 5
Groove 2013 STIG (Version 1, Release 3) Microsoft Groove 2013
Defense Information Systems Agency
12/13/2019 Standalone XCCDF 1.1.4 - Microsoft Groove 2013 STIG - Ver 1, Rel 3
Excel 2010 STIG (Version 1, Release 11) Microsoft Excel 2010
Defense Information Systems Agency
12/13/2019 Standalone XCCDF 1.1.4 - Microsoft Excel 2010 STIG - Ver 1, Rel 11
Bromium Secure Platform 4.x STIG (Version 1, Release 1) Bromium Secure Platform 4.0
Defense Information Systems Agency
12/12/2019 Standalone XCCDF 1.1.4 - Bromium Secure Platform 4.x STIG - Version 1, Release 1
BlackBerry 10.2x OS STIG (Version 1, Release 6) Blackberry OS 10.2
Defense Information Systems Agency
12/12/2019 Standalone XCCDF 1.1.4 - BlackBerry 10.2x OS STIG - Version 1, Release 6
Windows Firewall STIG (Version 1, Release 2) Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows Vista Firewall
Defense Information Systems Agency
12/12/2019 GPOs - Group Policy Objects (GPOs) - January 2019
Standalone XCCDF 1.1.4 - Windows Firewall STIG Version 1, Release 2
Microsoft Office 2013 STIG (Version 1 Release 3) Microsoft Office 2013
Defense Information Systems Agency
12/12/2019 SCAP 1.2 Content - Microsoft Office System 2013 STIG Benchmark - Ver 1, Rel 5 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Office 2013 STIG - Version 1 Release 3
Prose - Microsoft Office 2013 Overview - Ver 1, Rel 5
Microsoft Exchange 2010 STIG (Version 1 Release 6) Microsoft Exchange Server 2010
Defense Information Systems Agency
12/12/2019 Standalone XCCDF 1.1.4 - Microsoft Exchange 2010 STIG Version 1 Release 6
IPSEC VPN Gateway STIG (Version 1, Release 16) Juniper IDP Series Intrusion Detection and Prevention Appliance
Juniper ISG Series Integrated Security Gateway
Defense Information Systems Agency
12/12/2019 Standalone XCCDF 1.1.4 - IPSEC VPN Gateway STIG - Ver 1, Rel 16
Keyboard Video and Mouse Switch STIG (Version 2, Release 6) Dell KVM 2161DS_2
Defense Information Systems Agency
12/12/2019 Standalone XCCDF 1.1.4 - Keyboard Video and Mouse Switch STIG - Ver 2, Rel 6
* This checklist is still undergoing review for inclusion into the NCP.