National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 551 matching records. Displaying matches 241 through 260.

Name (Version) Target Authority Last Modified Resources
Windows Firewall STIG (Version 1, Release 2) Microsoft Windows Server 2008
Microsoft Windows Vista
Microsoft Windows Vista Firewall
Defense Information Systems Agency
12/12/2019 GPOs - Group Policy Objects (GPOs) - January 2019
Standalone XCCDF 1.1.4 - Windows Firewall STIG Version 1, Release 2
Microsoft Office 2013 STIG (Version 1 Release 3) Microsoft Office 2013
Defense Information Systems Agency
12/12/2019 SCAP 1.2 Content - Microsoft Office System 2013 STIG Benchmark - Ver 1, Rel 5 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Office 2013 STIG - Version 1 Release 3
Prose - Microsoft Office 2013 Overview - Ver 1, Rel 5
Microsoft Exchange 2010 STIG (Version 1 Release 6) Microsoft Exchange Server 2010
Defense Information Systems Agency
12/12/2019 Standalone XCCDF 1.1.4 - Microsoft Exchange 2010 STIG Version 1 Release 6
IPSEC VPN Gateway STIG (Version 1, Release 16) Juniper IDP Series Intrusion Detection and Prevention Appliance
Juniper ISG Series Integrated Security Gateway
Defense Information Systems Agency
12/12/2019 Standalone XCCDF 1.1.4 - IPSEC VPN Gateway STIG - Ver 1, Rel 16
Keyboard Video and Mouse Switch STIG (Version 2, Release 6) Dell KVM 2161DS_2
Defense Information Systems Agency
12/12/2019 Standalone XCCDF 1.1.4 - Keyboard Video and Mouse Switch STIG - Ver 2, Rel 6
CIS Aliyun Linux 2 Benchmark (1.0.0) Alibaba Aliyun Linux 2.0
Center for Internet Security (CIS)
12/05/2019 Prose - CIS Aliyun Linux 2 Benchmark v1.0.0
Network Perimeter Router L3 Switch (Version 8, Release 32) Cisco PIX ASA
Foundry Networks BigIron Router
Juniper Router M10
Juniper Router M16
Juniper Router M20
Juniper Router M40
Juniper Router M5
Defense Information Systems Agency
12/03/2019 Standalone XCCDF 1.1.4 - Sunset - Network Perimeter Router L3 Switch STIG - Ver 8, Rel 32
Network Infrastructure Router L3 Switch (Version 8, Release 29) Cisco PIX ASA
Foundry Networks BigIron Router
Juniper Router M10
Juniper Router M16
Juniper Router M20
Juniper Router M40
Juniper Router M5
Defense Information Systems Agency
12/03/2019 Standalone XCCDF 1.1.4 - Sunset - Network Infrastructure Router L3 Switch STIG - Ver 8, Rel 29
VMware ESX 3 Server STIG (Ver 1, Rel 2) VMware ESX Server 3.0.0
Defense Information Systems Agency
11/25/2019 Standalone XCCDF 1.1.4 - VMWare ESX 3 Policy STIG - Ver 1, Rel 2
Standalone XCCDF 1.1.4 - VMware ESX 3 Server STIG - Ver 1, Rel 2
Standalone XCCDF 1.1.4 - VMware ESX 3 Virtual Center STIG - Ver 1, Rel 2
Standalone XCCDF 1.1.4 - VMware ESX 3 Virtual Machine STIG - Ver 1, Rel 2
VMware vSphere 6.0 ESXi STIG (Ver 1, Rel 5) VMware vSphere 6.0 ESXi
Defense Information Systems Agency
11/25/2019 Standalone XCCDF 1.1.4 - Sunset - VMware vSphere 6.0 ESXi STIG - Ver 1, Rel 5
VMware vSphere 6.0 Virtual Machine STIG (Version 1, Release 1) VMware vSphere 6.0 Virtual Machine
Defense Information Systems Agency
11/25/2019 Standalone XCCDF 1.1.4 - Sunset - VMware vSphere 6.0 Virtual Machine STIG - Ver 1, Rel 1
VMware vSphere 6.0 vCenter Server for Windows STIG (Ver 1, Rel 4) VMware vSphere 6.0 vCenter Server for Windows
Defense Information Systems Agency
11/25/2019 Standalone XCCDF 1.1.4 - Sunset - VMware vSphere 6.0 vCenter Server for Windows STIG - Ver 1, Rel 4
Google Android 9.x STIG (Ver 1 Rel 1) Google Android 10.0
Defense Information Systems Agency
11/12/2019 Standalone XCCDF 1.1.4 - Google Android 9.x STIG - Ver 1 Rel 1
AIX 6.1 STIG (Version 1, Release 14) IBM AIX 6.1
Defense Information Systems Agency
11/07/2019 SCAP 1.1 Content - Sunset - AIX 6.1 STIG-Benchmark - Ver 1, Rel 9
Standalone XCCDF 1.1.4 - Sunset - AIX 6.1 STIG - Ver 1, Rel 14
CIS Apache Tomcat 8 Benchmark (1.1.0) Apache Tomcat 8.0
Center for Internet Security (CIS)
11/04/2019 Prose - Apache Tomcat 8 Benchmark v1.1.0
MultiFunction Device and Network Printers STIG (Version 2, Release 14) HP Color Laserjet 4730 MFP
Defense Information Systems Agency
11/01/2019 Standalone XCCDF 1.1.4 - Multifunction Device and Network Printers STIG - Ver 2, Rel 14
IBM DB2 V10-5 LUW STIG (Ver 1, Rel 4) IBM DB2 V10-5 for Linux, Unix, and Windows (LUW)
Defense Information Systems Agency
11/01/2019 Standalone XCCDF 1.1.4 - IBM DB2 V10.5 STIG - Ver 1, Rel 4
IBM MaaS360 with Watson v10-x MDM STIG (Ver 1, Rel 2) IBM MaaS360 MDM
Defense Information Systems Agency
10/28/2019 Standalone XCCDF 1.1.4 - IBM MaaS360 with Watson v10-x MDM STIG - Ver1, Rel 2
ISEC7 EMM Suite v6.x STIG (Ver 1, Rel 1) iSEC7 Enterprise Mobility Management 6.0
Defense Information Systems Agency
10/28/2019 Standalone XCCDF 1.1.4 - ISEC7 EMM Suite v6.x STIG - Ver 1, Rel 1
Cisco IOS XE Release 3 STIG (Version 1 Release 3) Cisco IOS XE
Defense Information Systems Agency
10/23/2019 Standalone XCCDF 1.1.4 - Sunset - Cisco IOS XE Release 3 NDM STIG - Ver 1, Rel 5
Standalone XCCDF 1.1.4 - Sunset - Cisco IOS XE Release 3 RTR STIG - Ver 1, Rel 3
* This checklist is still undergoing review for inclusion into the NCP.