National Vulnerability Database

National Vulnerability Database

National Vulnerability
Database

National Checklist Program Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 510 matching records. Displaying matches 81 through 100.


Name (Version) Target Authority Last Modified Resources
Windows 2003 MS STIG Benchmark (Version 6, Release 40) Microsoft Windows Server 2003
Microsoft Windows Server 2003 Service Pack 2
Microsoft Windows Server 2003 Service Pack 3
Microsoft Windows Server 2003 Service Pack 1
Defense Information Systems Agency 06/24/2019 SCAP 1.1 Content - Microsoft Windows 2003 MS STIG Benchmark - Ver 6, Rel 40
Standalone XCCDF 1.1.4 - Microsoft Windows 2003 MS STIG - Ver 6, Rel 37
Microsoft Windows Vista STIG (Version 6 Release 42) Microsoft Windows Vista
Microsoft Internet Explorer
Defense Information Systems Agency 06/12/2019 SCAP 1.1 Content - Microsoft Windows Vista STIG Benchmark - Ver 6, Rel 44
Standalone XCCDF 1.1.4 - Microsoft Windows Vista STIG - Ver 6, Rel 42
Microsoft Word 2010 STIG (Ver 1, Rel 11) Microsoft Word 2010 Defense Information Systems Agency 06/13/2019 SCAP 1.1 Content - Microsoft Word 2010 STIG Benchmark- Ver 1, Rel 2 (SCC tool use only)
Standalone XCCDF 1.1.4 - Microsoft Word 2010 STIG - Ver 1, Rel 11
Oracle Weblogic Server (11G) Oracle Weblogic Server National Security Agency
MITRE
10/30/2018 SCAP 1.1 Content - Oracle Weblogic Server
Red Hat 5 STIG (Version 1, Release 18) Red Hat Enterprise Linux 5 Defense Information Systems Agency 06/14/2019 SCAP 1.1 Content - Red Hat 5 STIG Benchmark - Ver 1, Rel 19
Standalone XCCDF 1.1.4 - Red Hat 5 Manual STIG - Ver 1, Rel 18
SharePoint Server 2007 Security Guide (1.0) Microsoft Office SharePoint Server 2007 National Security Agency
MITRE
10/30/2018 SCAP 1.1 Content - SharePoint Server 2007 Security Guide
Solaris 9 (Ver 1, Rel 12) Sun Solaris 9 SPARC
Sun Solaris 9
Defense Information Systems Agency 06/24/2019 SCAP 1.1 Content - Solaris 9 SPARC STIG Benchmark - Ver 1, Rel 12
SCAP 1.0 Content - Solaris 9 SPARC STIG Benchmark, Version 1, Release 3
Standalone XCCDF 1.1.4 - Solaris 9 SPARC Manual STIG - Ver 1, Rel 9
Standalone XCCDF 1.1.4 - Solaris 9 x86 Manual STIG - Ver 1, Rel 9
Suspicious file names and file locations (v0.3) Microsoft Windows XP CyberESI 06/07/2011 SCAP 1.1 Content - Suspicious file names and file locations
DoD Consensus Security Configuration Checklist for Red Hat Enterprise Linux 5 (2.0) Red Hat Enterprise Linux 5 Department of Defense 10/30/2018 SCAP 1.0 Content - RHEL 5 SCAP
Puppet Module - RHEL 5 Puppet Module
Prose - D0D RHEL5 security recommendations
Microsoft Office 2007 STIG (Version 4, Release 1) Microsoft Outlook 2007
Microsoft Word 2007
Microsoft Office 2007
Microsoft Access 2007
Microsoft Excel 2007
Microsoft Infopath 2007
Microsoft PowerPoint 2007
Microsoft Visio 2007
Defense Information Systems Agency 04/15/2019 SCAP 1.0 Content - Microsoft Access 2007 generated out of the GoldDisk Tool (version 2.9.8.84).
SCAP 1.0 Content - Microsoft Excel 2007 generated out of the GoldDisk Tool (version 2.9.8.84).
SCAP 1.0 Content - Microsoft Infopath 2007 generated out of the GoldDisk Tool (version 2.9.8.84).
SCAP 1.0 Content - Microsoft Office System 2007 generated out of the GoldDisk Tool (version 2.9.8.84).
SCAP 1.0 Content - Microsoft Outlook 2007 generated out of the GoldDisk Tool (version 2.9.8.84).
SCAP 1.0 Content - Microsoft PowerPoint 2007 generated out of the GoldDisk Tool (version 2.9.8.84).
SCAP 1.0 Content - Microsoft Visio 2007 generated out of the GoldDisk Tool (version 2.9.8.84).
SCAP 1.0 Content - Microsoft Word 2007 generated out of the GoldDisk Tool (version 2.9.8.84).
Microsoft Security Compliance Manager Internet Explorer 10 (1.0) Microsoft Internet Explorer 10 Microsoft Corporation 09/10/2018 SCAP 1.0 Content - Microsoft IE10 Computer Security Compliance (generated from Microsoft Security Compliance Manager).
Microsoft Security Compliance Manager - Internet Explorer 11 (1.0) Microsoft Internet Explorer 11 Microsoft Corporation 09/13/2018 SCAP 1.0 Content - Microsoft IE11 Computer Security Compliance (generated from Microsoft Security Compliance Manager).
Microsoft Security Compliance Manager - Internet Explorer 8 (1.0) Microsoft Internet Explorer 8 Microsoft Corporation 09/13/2018 SCAP 1.0 Content - Microsoft IE8 Computer Security Compliance Baseline (generated from Microsoft Security Compliance Manager).
Internet Explorer 8 STIG (Version 1, Release 20) Microsoft Internet Explorer 8 Defense Information Systems Agency 06/07/2019 SCAP 1.0 Content - Microsoft Internet Explorer 8 STIG Benchmark - Ver 1, Rel 12 (SCAP)
Standalone XCCDF 1.1.4 - Microsoft Internet Explorer 8 STIG - Ver 1, Rel 20
Microsoft Security Compliance Manager Internet Explorer 9 (1.0) Microsoft Internet Explorer 9 Microsoft Corporation 09/13/2018 SCAP 1.0 Content - Microsoft Internet Explorer 9 Computer Security Compliance (generated from Microsoft Security Compliance Manager).
Internet Explorer 9 STIG (Version 1, Release 15) Microsoft Internet Explorer 9 Defense Information Systems Agency 06/07/2019 SCAP 1.0 Content - Microsoft Internet Explorer 9 STIG Benchmark - Ver 1, Rel 7 (SCAP)
Standalone XCCDF 1.1.4 - Microsoft Internet Explorer 9 STIG - Ver 1, Rel 15
Microsoft Security Compliance Manager - Microsoft Office 2007 SP2 (1.0) Microsoft Office 2007
Microsoft Office 2007 Service Pack 2
Microsoft Corporation 09/13/2018 SCAP 1.0 Content - Microsoft Office 2007 SP2 EC Baseline (generated from Microsoft Security Compliance Manager).
SCAP 1.0 Content - Microsoft Office 2007 SP2 SSLF Baseline (generated from Microsoft Security Compliance Manager).
Microsoft Security Compliance Manager - Microsoft Office 2010 Service Pack 1 (1.0) Microsoft Office 2010 Service Pack 1 Microsoft Corporation 09/13/2018 SCAP 1.0 Content - Microsoft Office 2010 SP1 Computer Security (generated from Microsoft Security Compliance Manager).
Microsoft Security Compliance Manager - Microsoft Office 2013 (1.0) Microsoft Office 2013 Microsoft Corporation 09/13/2018 SCAP 1.0 Content - Microsoft Office 2013 Computer Security Baseline (generated from Microsoft Security Compliance Manager).
SCAP 1.0 Content - Microsoft Office 2013 User Security Baseline (generated from Microsoft Security Compliance Manager).
Microsoft Security Compliance Manager - Windows 10 1607 (1.0) Microsoft Windows 10 1607 Microsoft Corporation 09/13/2018 SCAP 1.0 Content - Microsoft Windows 10 1607 BitLocker Security (generated from Microsoft Security Compliance Manager).
SCAP 1.0 Content - Microsoft Windows 10 1607 Computer Security Compliance (generated from Microsoft Security Compliance Manager).
SCAP 1.0 Content - Microsoft Windows 10 1607 Credential Guard Security (generated from Microsoft Security Compliance Manager).
SCAP 1.0 Content - Microsoft Windows 10 1607 Domain Security Compliance (generated from Microsoft Security Compliance Manager).
GPOs - Windows 10 1607 Security Baseline
* This checklist is still undergoing review for inclusion into the NCP.