National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 516 matching records. Displaying matches 261 through 280.

Name (Version) Target Authority Last Modified Resources
CISCO CSS DNS STIG (Ver 4, Rel 18) CISCO CSS Domain Name System (DNS)
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - CISCO CSS DNS STIG - Ver 4, Rel 1.18
Cisco IOS XE Release 3 STIG (Version 1 Release 3) Cisco IOS XE
Defense Information Systems Agency
10/23/2019 Standalone XCCDF 1.1.4 - Sunset - Cisco IOS XE Release 3 NDM STIG - Ver 1, Rel 5
Standalone XCCDF 1.1.4 - Sunset - Cisco IOS XE Release 3 RTR STIG - Ver 1, Rel 3
Defense Switched Network (DSN) (Version 2, Release 8) Cisco Content Services Switch 11000
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Defense Switch Network (DSN) STIG - Ver 2, Rel 8
Desktop Applications General STIG (Ver 4, Rel 5) Mcafee VirusScan 7.0
Microsoft Frontpage 2002
Microsoft Frontpage 2003
Microsoft Internet Explorer
Microsoft Office 2000
Microsoft Office 2003
Microsoft Office 2007
Microsoft Office 2007 SP1
Microsoft Office XP
Microsoft Outlook 2000
Microsoft Outlook 2002
Microsoft Outlook 2007
Microsoft Word 2007
Netscape Navigator
Symantec Norton Antivirus 10.0
Symantec Norton Antivirus 9.0
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Desktop Applications General STIG - Ver 4, Rel 5
DNS Policy STIG (Ver 4, Rel 1.22) Cisco Content Services Switch 11000
ISC Bind 9.3.1
ISC Bind 9.3.2
Microsoft Windows 2000
Microsoft Windows Server 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - DNS Policy STIG - Ver 4, Rel 1.22
Good for Enterprise 8.x STIG (Version 1, Release 3) Mobile Device Manager for the Blackberry Enterprise Server
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Good for Enterprise 8.x STIG - Ver 1, Rel 3
Google Search Appliance STIG (Version 1, Release 1) Google Search Appliance
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Google Search Appliance STIG
IBM MaaS360 MDM STIG (Ver 1, Rel 2) IBM MaaS360 MDM
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - IBM MaaS360 V2.3.x MDM STIG - Ver 1, Rel 2
Java Run Time Environment (JRE) for XP STIG (Ver 1, Rel 5) Oracle Java Runtime Environment (JRE) 1.7.0
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - JRE for XP STIG - Ver 1, Rel 5
L3 KOV-26 Talon (Wireless Role) STIG (Version 6, Release 8) L3 KOV-26 Talon
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - L3 KOV-26 Talon (Wireless Role) STIG - Ver 6, Rel 8
LG Android 6.x STIG (Version 1, Release 2) Mobile Device Manager for the Blackberry Enterprise Server
Defense Information Systems Agency
09/12/2019 Standalone XCCDF 1.1.4 - Sunset - LG Android 6.x STIG Ver 1, Rel 1
Standalone XCCDF 1.1.4 - Sunset - LG Android 6.x STIG - Ver 1, Rel 2
Access 2007 STIG (Version 4, Release 15) Microsoft Access 2007
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Microsoft Access 2007 STIG - Ver 4, Rel 15
Excel 2007 STIG (Version 4, Release 13) Microsoft Excel 2007
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Microsoft Excel 2007 STIG - Ver 4, Rel 13
IIS 6.0 STIG (Version 6, Release 16) Microsoft Internet Information Services 6.0
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Microsoft IIS 6.0 STIG - Ver 6, Rel 16
Microsoft IIS 7.0 STIG (Version 1, Release 19) Microsoft Internet Information Services 7.0
Defense Information Systems Agency
01/17/2020 Standalone XCCDF 1.1.4 - Sunset - Microsoft IIS 7.0 STIG
Infopath 2007 STIG (Version 4, Release 13) Microsoft Infopath 2007
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Microsoft InfoPath 2007 STIG - Ver 4, Rel 13
Internet Explorer 6 STIG (Version 4, Release 11) Microsoft Internet Explorer 6
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Microsoft Internet Explorer 6 STIG - Ver 4, Rel 11
Internet Explorer 7 STIG (Version 4, Release 20) Microsoft Internet Explorer 7
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Microsoft Internet Explorer 7 STIG - Ver 4, Rel 20
Microsoft Office 2003 STIG (Version 4 Release 4) Microsoft Access 2003
Microsoft Excel 2003
Microsoft InfoPath 2003
Microsoft Outlook 2003
Microsoft PowerPoint 2003
Microsoft Word 2003
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Microsoft Office 2003 STIG - Ver 4, Rel 4
Office System 2007 STIG (Version 4, Release 15) Microsoft Office System 2007
Defense Information Systems Agency
09/11/2019 Standalone XCCDF 1.1.4 - Sunset - Microsoft Office System 2007 STIG - Ver 4, Rel 15
* This checklist is still undergoing review for inclusion into the NCP.