National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 543 matching records. Displaying matches 61 through 80.


Name (Version) Target Product Category Authority Last Modified Resources
IBM Tivoli Identity Manager Security Guide (4.6) IBM Tivoli Identity Manager 4.6 Identity Management National Security Agency
MITRE
10/30/2018 SCAP 1.1 Content - IBM Tivoli Identity Manager 4.6 Security Guide
JBoss Enterprise Application Platform (EAP) (5.x) Red Hat JBoss Enterprise Application Platform 5.0.0
Red Hat JBoss Enterprise Application Platform 5.0.1
Red Hat JBoss Enterprise Application Platform 5.1.0
Red Hat JBoss Enterprise Application Platform 5.1.1
Red Hat JBoss Enterprise Application Platform 5.1.2
Web Server
Application Server
Red Hat 10/23/2017 SCAP 1.1 Content - JBoss Enterprise Application Platform (EAP)
USGCB Red Hat Enterprise Linux (RHEL) 5 Desktop (1.2.5.0) Red Hat Enterprise Linux 5 Operating System USGCB/TIS 03/30/2018 SCAP 1.1 Content - USGCB Red Hat Enterprise Linux (RHEL) 5 Desktop
Puppet Module - RHEL 5 Puppet Module
Reference Link - Kickstart file
Prose - USGCB-RHEL5-Desktop-Issues-Version-1.0.5.0
Prose - USGCB-RHEL5-Desktop-Settings-Version-1.0.5.0
Access 2010 STIG (Version 1, Release 10) Microsoft Access 2010 Desktop Application Defense Information Systems Agency 05/27/2018 SCAP 1.1 Content - Microsoft Access 2010 STIG Benchmark - Ver 1, Rel 2 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Access 2010 STIG - Ver 1, Rel 10
Microsoft Office 2010 STIG (Version 1, Release 10) Microsoft Office 2010
Microsoft Excel 2010
Microsoft InfoPath 2010
Microsoft OneNote 2010
Microsoft Outlook 2010
Microsoft PowerPoint 2010
Microsoft Project 2010
Microsoft Publisher 2010
Microsoft Word 2010
Microsoft Access 2010
Office Suite
Desktop Application
Defense Information Systems Agency 08/15/2017 SCAP 1.1 Content - Microsoft Excel 2010 STIG Benchmark - Ver 1, Rel 2 (SCC tool use only)
SCAP 1.1 Content - Microsoft Word 2010 STIG Benchmark- Ver 1, Rel 2 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Excel 2010 STIG - Ver 1, Rel 10
Standalone XCCDF 1.1.4 - Microsoft Office 2010 STIG Version 1, Release 9
Standalone XCCDF 1.1.4 - Microsoft Word 2010 STIG - Ver 1, Rel 10
Prose - Microsoft Office 2010 Overview - Version 1, Release 12
Excel 2010 STIG (Version 1, Release 11) Microsoft Excel 2010 Desktop Application Defense Information Systems Agency 05/27/2018 SCAP 1.1 Content - Microsoft Excel 2010 STIG Benchmark - Ver 1, Rel 2 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Excel 2010 STIG - Ver 1, Rel 11
Infopath 2010 STIG (Version 1, Release 11) Microsoft InfoPath 2010 Desktop Application Defense Information Systems Agency 05/27/2018 SCAP 1.1 Content - Microsoft InfoPath 2010 STIG Benchmark - Ver 1, Rel 2 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft InfoPath 2010 STIG - Ver 1, Rel 11
Internet Explorer 10 STIG (Version 1 Release 14) Microsoft Internet Explorer 10 Web Browser Defense Information Systems Agency 08/03/2017 SCAP 1.1 Content - Microsoft Internet Explorer 10 STIG Benchmark - Ver 1, Rel 9
Standalone XCCDF 1.1.4 - Microsoft Internet Explorer 10 STIG - Ver 1, Rel 15
Office System 2010 STIG (Version 1, Release 12) Microsoft Office System 2010 Desktop Client Defense Information Systems Agency 05/25/2018 SCAP 1.1 Content - Microsoft Office System 2010 STIG Benchmark - Ver 1, Rel 3 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Office System 2010 STIG - Ver 1, Rel 12
OneNote 2010 STIG (Version 1, Release 9) Microsoft OneNote 2010 Desktop Application Defense Information Systems Agency 05/27/2018 SCAP 1.1 Content - Microsoft OneNote 2010 STIG Benchmark - Version 1, Release 1 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft OneNote 2010 STIG - Ver 1, Rel 9
Outlook 2010 STIG (Version 1, Release 13) Microsoft Outlook 2010 Desktop Application Defense Information Systems Agency 07/03/2018 SCAP 1.1 Content - Microsoft Outlook 2010 STIG Benchmark - Ver 1, Rel 3 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Outlook 2010 STIG - Ver 1, Rel 13
PowerPoint 2010 STIG (Version 1, Release 10) Microsoft PowerPoint 2010 Desktop Application Defense Information Systems Agency 05/25/2018 SCAP 1.1 Content - Microsoft Powerpoint 2010 STIG Benchmark - Ver 1, Rel 2 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft PowerPoint 2010 STIG - Ver 1, Rel 10
Project 2010 STIG (Version 1, Release 9) Microsoft Project 2010 Desktop Application Defense Information Systems Agency 05/25/2018 SCAP 1.1 Content - Microsoft Project 2010 STIG Benchmark - Version 1, Release 1 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Project 2010 STIG - Ver 1, Rel 9
Publisher 2010 STIG (Version 1, Release 11) Microsoft Publisher 2010 Desktop Application Defense Information Systems Agency 05/27/2018 SCAP 1.1 Content - Microsoft Publisher 2010 STIG Benchmark - Ver 1, Rel 2 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Publisher 2010 STIG - Ver 1, Rel 11
Microsoft Windows Vista STIG (Version 6 Release 41) Microsoft Windows Vista
Microsoft Internet Explorer
Operating System
Web Browser
Defense Information Systems Agency 08/15/2017 SCAP 1.1 Content - Microsoft Windows Vista Security Checklist Version 6, Release 44
Standalone XCCDF 1.1.4 - Windows Vista STIG Version 6, Release 41
Microsoft Word 2010 STIG (Ver 1, Rel 11) Microsoft Word 2010 Desktop Application Defense Information Systems Agency 05/27/2018 SCAP 1.1 Content - Microsoft Word 2010 STIG Benchmark- Ver 1, Rel 2 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Word 2010 STIG - Ver 1, Rel 11
Oracle Weblogic Server (11G) Oracle Weblogic Server Web Server National Security Agency
MITRE
10/30/2018 SCAP 1.1 Content - Oracle Weblogic Server
Red Hat 5 STIG (Version 1, Release 18) Red Hat Enterprise Linux 5 Operating System Defense Information Systems Agency 09/07/2017 SCAP 1.1 Content - Red Hat 5 STIG Benchmark, Version 1, Release 18
Standalone XCCDF 1.1.4 - Red Hat 5 Manual STIG - Ver 1, Rel 18
SharePoint Server 2007 Security Guide (1.0) Microsoft Office SharePoint Server 2007 Enterprise Application National Security Agency
MITRE
10/30/2018 SCAP 1.1 Content - SharePoint Server 2007 Security Guide
Solaris 9 (Ver 1, Rel 8) Sun Solaris 9 SPARC
Sun Solaris 9
Operating System Defense Information Systems Agency 08/15/2017 SCAP 1.1 Content - Solaris 9 SPARC STIG Benchmark, Version 1, Release 10
SCAP 1.0 Content - Solaris 9 SPARC STIG Benchmark, Version 1, Release 3
Standalone XCCDF 1.1.4 - Solaris 9 SPARC Manual STIG - Version 1, Release 8
Standalone XCCDF 1.1.4 - Solaris 9 x86 Manual STIG - Version 1, Release 8
* This checklist is still undergoing review for inclusion into the NCP.