National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 546 matching records. Displaying matches 41 through 60.

Name (Version) Target Authority Last Modified Resources
Cisco IOS Switch STIG (Ver 1, Rel 1) Cisco IOS
Cisco IOS XE
Cisco NX-OS
Defense Information Systems Agency
04/28/2021 Standalone XCCDF 1.1.4 - Cisco IOS Switch STIG
Standalone XCCDF 1.1.4 - Cisco IOS-XE Switch STIG
Standalone XCCDF 1.1.4 - Cisco NX-OS Switch STIG
Microsoft Windows 2012 Server DNS STIG (Ver 2, Rel 2) Microsoft Windows Server 2012 R2
Defense Information Systems Agency
04/28/2021 Standalone XCCDF 1.1.4 - Microsoft Windows 2012 Server Domain Name System STIG - Ver 2, Rel 2
Docker Enterprise 2.x Linux/UNIX STIG (Ver 2 Rel 1) Docker Enterprise 2.0.0
Defense Information Systems Agency
04/28/2021 Machine-Readable Format - Docker Enterprise 2.x Linux/Unix STIG for Ansible - Ver 1, Rel 1
Standalone XCCDF 1.1.4 - Docker Enterprise 2.x Linux/Unix - Ver 2, Rel 1
Cisco IOS Router STIG (Version 2, Release 1) Cisco IOS
Defense Information Systems Agency
04/28/2021 Machine-Readable Format - Cisco IOS XE Router STIG for Ansible - Ver 2, Rel 1
Standalone XCCDF 1.1.4 - Cisco IOS-XE Router STIG
Standalone XCCDF 1.1.4 - Cisco IOS-XR Router STIG
Standalone XCCDF 1.1.4 - Cisco IOS Router STIG
Google Chrome Browser STIG for Windows (Version 2, Release 3) Google Chrome 33
Defense Information Systems Agency
04/28/2021 SCAP 1.2 Content - Google Chrome Current Windows STIG Benchmark - Ver 2, Rel 3
Automated Content - SCC 5.4 Windows
GPOs - Group Policy Objects (GPOs) - February 2021
Standalone XCCDF 1.1.4 - Google Chrome STIG - Ver 2, Rel 3
Microsoft SQL Server 2016 STIG (Ver 2, Rel 1) Microsoft SQL Server 2016
Defense Information Systems Agency
04/28/2021 Standalone XCCDF 1.1.4 - Microsoft SQL Server 2016 STIG
Motorola Android 9.x STIG (Ver 1, Rel 1) Google Android 9.x
Defense Information Systems Agency
04/28/2021 Standalone XCCDF 1.1.4 - Motorola Android 9 STIG
Oracle WebLogic Server 12c STIG (Ver 2, Rel 1) Oracle Weblogic Server
Defense Information Systems Agency
04/28/2021 Standalone XCCDF 1.1.4 - Oracle WebLogic Server 12c - Ver 2, Rel 1
Microsoft IIS 10.0 STIG (Ver 2, Rel 1) Microsoft IIS 10
Defense Information Systems Agency
04/28/2021 Standalone XCCDF 1.1.4 - Microsoft IIS 10.0 STIG
Oracle 12c Database STIG (Ver 2, Rel 1) Oracle Database 12c
Defense Information Systems Agency
04/28/2021 Standalone XCCDF 1.1.4 - Oracle Database 12c STIG - Ver 2, Rel 1
Microsoft Office 365 ProPlus STIG (Ver 2, Rel 1) Microsoft Office 365 ProPlus
Defense Information Systems Agency
04/28/2021 GPOs - Group Policy Objects (GPOs) - February 2021
Standalone XCCDF 1.1.4 - Microsoft Office 365 ProPlus STIG - Ver 2, Rel 2
Azure Security Benchmark (1.0) Microsoft Azure
Microsoft Corporation
04/22/2021 Prose - Azure Security Benchmark
Windows Firewall STIG and Advanced Security STIG (version 1, release 7) windows firewall
Defense Information Systems Agency
04/20/2021 SCAP 1.2 Content - Microsoft Windows Firewall STIG Benchmark - Ver 1, Rel 7
Automated Content - SCC 5.4 Windows
GPOs - Group Policy Objects (GPOs) - February 2021
Standalone XCCDF 1.1.4 - Microsoft Windows Firewall STIG and Advanced Security STIG - Ver 1, Rel 7
Microsoft .NET Framework 4 (Version 2, Release 1) Microsoft .NET Framework 4.0
Defense Information Systems Agency
04/20/2021 SCAP 1.2 Content - Microsoft .Net Framework 4 STIG Benchmark - Ver 2, Rel 1
Automated Content - SCC 5.4 Windows
Standalone XCCDF 1.1.4 - Microsoft .Net Framework 4.0 STIG - Ver 2, Rel 1
Mozilla Firefox STIG (Version 5, Release 1) Mozilla Firefox
Defense Information Systems Agency
04/20/2021 SCAP 1.2 Content - Mozilla Firefox for RHEL STIG Benchmark - Ver 5, Rel 1
SCAP 1.2 Content - Mozilla Firefox Windows STIG Benchmark - Ver 5, Rel 1
Automated Content - SCC 5.4 Windows
Automated Content - SCC 5.4 RHEL 6 i686
Automated Content - SCC 5.4 RHEL 6 x86 64
Automated Content - SCC 5.4 RHEL 7/Oracle Linux 7/SLES12 x86 64
Automated Content - SCC 5.4 RHEL 8 x86 64
Standalone XCCDF 1.1.4 - Mozilla Firefox STIG - Ver 5, Rel 1
ZIP - Mozilla Firefox STIG Configuration Files - Ver 5, Rel 1
McAfee Antivirus 8.8 STIG (Version 5, Release 21) Mcafee Virusscan Enterprise 8.8.0
Defense Information Systems Agency
04/20/2021 SCAP 1.2 Content - McAfee VirusScan 8.8 Local Client STIG Benchmark - Ver 1, Rel 2
SCAP 1.2 Content - McAfee VirusScan 8.8 Managed Client STIG Benchmark - Ver 1, Rel 3
Automated Content - SCC 5.4 Windows
Standalone XCCDF 1.1.4 - McAfee Virus Scan 8.8 Local Client STIG - Ver 5, Rel 16
Standalone XCCDF 1.1.4 - McAfee VirusScan 8.8 Managed Client STIG - Ver 5, Rel 21
Internet Explorer 11 STIG (Version 1, Release 19) Microsoft Internet Explorer 11
Defense Information Systems Agency
04/20/2021 SCAP 1.2 Content - Microsoft Internet Explorer 11 STIG Benchmark - Ver 1, Rel 15
Automated Content - SCC 5.4 Windows
GPOs - Group Policy Objects (GPOs) - February 2021
Standalone XCCDF 1.1.4 - Microsoft Internet Explorer 11 STIG - Ver 1, Rel 19
CIS Oracle MySQL Enterprise Edition 8.0 Benchmark (v1.0.0) Oracle MySQL Enterprise Edition 8.0
Center for Internet Security (CIS)
04/16/2021 Prose - CIS Oracle MySQL Enterprise Edition 8.0 Benchmark v1.0.0
Canonical Ubuntu 20.04 LTS STIG (Ver 1, Rel 1) Oracle MySQL Enterprise Edition 8.0
Defense Information Systems Agency
04/09/2021 Standalone XCCDF 1.1.4 - Canonical Ubuntu 20.04 LTS STIG - Ver 1, Rel 1
CIS PostgreSQL 13 Benchmark (1.0.0) PostgreSQL 12
Center for Internet Security (CIS)
03/29/2021 Prose - CIS PostgreSQL 13 Benchmark v1.0.0
* This checklist is still undergoing review for inclusion into the NCP.