U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Checklist Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 783 matching records. Displaying matches 501 through 520.

Name (Version) Target Authority Last Modified Resources
Sharepoint Designer 2013 STIG (Version 1, Release 3) Microsoft SharePoint Designer 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Sharepoint Designer 2013 STIG - Ver 1, Rel 3
OneNote 2013 STIG (Version 1, Release 3) Microsoft OneNote 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft OneNote 2013 STIG - Ver 1, Rel 3
Microsoft Skype for Business 2016 STIG (Version 1, Release 2) Microsoft Skype for Business 2016
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Skype for Business 2016 STIG - Ver 1, Rel 1
Microsoft Publisher 2016 STIG (Version 1, Release 4) Microsoft Publisher 2016
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Publisher 2016 STIG - Ver 1, Rel 3
PowerPoint 2013 STIG (Version 1, Release 6) Microsoft Power Point 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft PowerPoint 2013 STIG - Ver 1, Rel 6
Adobe Acrobat Pro DC Classic Track STIG (Ver 2, Rel 1) Adobe Acrobat Pro DC Classic Track
Defense Information Systems Agency
10/29/2020 GPOs - Group Policy Objects (GPOs) - October 2020
Standalone XCCDF 1.1.4 - Sunset - Adobe Acrobat Pro DC Classic Track STIG - Ver 2, Rel 1
NIST National Checklist for Red Hat Virtualization Host 4.x (content v0.1.48) Red Hat Virtualization Host 4.3
Red Hat
10/26/2020 SCAP 1.3 Content - NIST National Checklist for Red Hat Virtualization Host 4.x
Ansible Playbook - [DRAFT] DISA STIG for Red Hat Virtualization Host (RHVH)
Ansible Playbook - VPP - Protection Profile for Virtualization v. 1.0 for Red Hat Virtualization Hypervisor (RHVH)
Machine-Readable Format - OpenControl-formatted NIST 800-53 responses for Red Hat Virtualization Host 4.x
OpenShift 3.x on Azure for Government (FedRAMP Moderate) (v1) Red Hat OpenShift Container Platform 3.10
Red Hat OpenShift Container Platform 3.11
Red Hat OpenShift Container Platform 3.5
Red Hat OpenShift Container Platform 3.6
Red Hat OpenShift Container Platform 3.7
Red Hat OpenShift Container Platform 3.8
Red Hat OpenShift Container Platform 3.9
Red Hat
10/26/2020 Security Template - OpenShift Container Platform 3.x on Azure for Government, FedRAMP Moderate SSP Template
Security Template - Ansible Playbooks supporting the creation of either a multi-node full HA production cluster or a single node designed for exploration of OpenShift on Azure.
Prose - Deploying Red Hat OpenShift Container Platform 3 on Microsoft Azure
NIST National Checklist for Red Hat OpenShift Container Platform 3.x (content v0.1.48) Red Hat OpenShift Container Platform 3.10
Red Hat OpenShift Container Platform 3.11
Red Hat OpenShift Container Platform 3.5
Red Hat OpenShift Container Platform 3.6
Red Hat OpenShift Container Platform 3.7
Red Hat OpenShift Container Platform 3.8
Red Hat OpenShift Container Platform 3.9
Red Hat
10/26/2020 SCAP 1.3 Content - NIST National Checklist for Red Hat OpenShift Container Platform 3.x
Machine-Readable Format - OpenControl-formatted NIST 800-53/FISMA Applicability Guide for OpenShift 3.x
BlackBerry UEM 12.10 STIG (Ver 1, Rel 1) BlackBerry UEM 12.10
Defense Information Systems Agency
08/10/2020 Standalone XCCDF 1.1.4 - Sunset - BlackBerry UEM 12.10 STIG - Ver 1, Rel 1
BlackBerry UEM 12.11 STIG (Ver 1, Rel 1) BlackBerry UEM 12.11
Defense Information Systems Agency
08/10/2020 Standalone XCCDF 1.1.4 - Sunset - BlackBerry UEM 12.11 STIG - Ver 1, Rel 1
HP FlexFabric Switch Router STIG (1.0) HP FlexFabric
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - HP FlexFabric Switch STIG
Samsung Android OS 8 (with Knox 3.x) STIG (Ver 1, Rel 3) Google Android 8.0
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Sunset - Samsung Android OS 8 with Knox 3.x STIG
BlackBerry Enterprise Mobility Server (BEMS) 2.x STIG (Ver 1, Rel 3) BlackBerry Enterprise Mobility Server (BEMS)
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - BlackBerry Enterprise Mobility Server (BEMS) 2.x STIG - Ver 1, Rel 3
Arista Multilayer Switch (MLS) DCS-7000 Series (Version 1, Release 3) Arista Multilayer Switch (MLS) DCS-7050T
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Arista MLS DCS-7000 Series STIG
Microsoft Windows 2008 R2 STIG (Version 1, Release 34) Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008 R2 Service Pack 1
Microsoft Windows Server 2008 r2 Itanium
Microsoft Windows Server 2008 r2 Service Pack 1 Itanium
Microsoft Windows Server 2008 r2 x64
Microsoft Windows Server 2008 r2 x64 Service Pack 1
Defense Information Systems Agency
07/07/2020 SCAP 1.2 Content - Sunset - Microsoft Windows 2008 R2 DC STIG Benchmark - Ver 1, Rel 33
SCAP 1.2 Content - Sunset - Microsoft Windows 2008 R2 MS STIG Benchmark - Ver 1, Rel 34
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 R2 DC STIG - Ver 1, Rel 34
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 R2 MS STIG - Ver 1, Rel 33
Microsoft Windows 7 (Version 1, Release 36) Microsoft Windows 7
Defense Information Systems Agency
07/07/2020 SCAP 1.2 Content - Sunset - Microsoft Windows 7 STIG Benchmark - Ver 1, Rel 36
Machine-Readable Format - Sunset - Microsoft Windows 7 Audit Benchmark
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 7 STIG - Ver 1, Rel 32
Windows 2008 STIG (Version 6, Release 46) Microsoft Internet Explorer
Microsoft Windows Defender
Microsoft Windows Mail
Microsoft Windows Media Player
Microsoft Windows Server 2008
Defense Information Systems Agency
07/07/2020 SCAP 1.2 Content - Sunset - Microsoft Windows 2008 DC STIG Benchmark - Ver 6, Rel 45
SCAP 1.2 Content - Sunset - Microsoft Windows 2008 MS STIG Benchmark - Ver 6, Rel 45
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 DC STIG - Ver 6, Rel 47
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 MS STIG - Ver 6, Rel 46
Bromium Secure Platform Secure Configuation Checklist (4.0) Bromium Secure Platform 4.0
Bromium
05/19/2020 ZIP - Bromium Secure Checklist Policy
Prose - Bromium Secure Configuration Checklist
Samsung Android OS 7 (with Knox 2.x) STIG (Ver 1, Rel 7) Samsung Android OS 7
Defense Information Systems Agency
04/29/2020 Standalone XCCDF 1.1.4 - Sunset - Samsung Android OS 7 with Knox 2.x STIG - Ver 1, Rel 7
* This checklist is still undergoing review for inclusion into the NCP.