U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Checklist Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 297 matching records. Displaying matches 1 through 20.

Name (Version) Target Authority Last Modified Resources
CIS PostgreSQL 14 Benchmark (1.2.0) PostgreSQL 14.0
Center for Internet Security (CIS)
01/31/2025 Prose - CIS PostgreSQL 14 Benchmark v1.2.0
CIS PostgreSQL 17 Benchmark (1.0.0) PostgreSQL 17.0
Center for Internet Security (CIS)
01/30/2025 Prose - CIS PostgreSQL 17 Benchmark v1.0.0
CIS PostgreSQL 16 Benchmark (1.0.0) PostgreSQL 16.0
Center for Internet Security (CIS)
01/30/2025 Prose - CIS PostgreSQL 16 Benchmark v1.0.0
CIS PostgreSQL 15 Benchmark (1.1.0) PostgreSQL 15.0
Center for Internet Security (CIS)
01/30/2025 Prose - CIS PostgreSQL 15 Benchmark v1.1.0
CIS Microsoft Azure Storage Services Benchmark (1.0.0) Microsoft Azure
Center for Internet Security (CIS)
11/20/2024 Prose - CIS Microsoft Azure Storage Services Benchmark v1.0.0
CIS Microsoft SQL Server 2019 (1.3.0) Microsoft SQL Server 2019
Center for Internet Security (CIS)
11/14/2024 Prose - CIS Microsoft SQL Server 2019 Benchmark v1.3.0
CIS MariaDB 10.6 Benchmark (1.1.0) MariaDB Enterprise Server 10.x
Center for Internet Security (CIS)
11/04/2024 Prose - CIS MariaDB 10.6 Benchmark v1.1.0
CIS Microsoft SQL Server 2019 (1.4.0) Microsoft SQL Server 2019
Center for Internet Security (CIS)
11/04/2024 Prose - CIS Microsoft SQL Server 2019 Benchmark v1.4.0
CIS Microsoft Azure Foundations Benchmark (3.0.0) Microsoft Azure
Center for Internet Security (CIS)
11/04/2024 Prose - CIS Microsoft Azure Foundations Benchmark v3.0.0
CIS MariaDB 10.11 Benchmark (1.0.0) MariaDB Enterprise Server 10.x
Center for Internet Security (CIS)
11/04/2024 Prose - CIS MariaDB 10.11 Benchmark v1.0.0
CIS Microsoft Azure Database Services Benchmark (1.0.0) Microsoft Azure
Center for Internet Security (CIS)
10/01/2024 Prose - CIS Microsoft Azure Database Services Benchmark v1.0.0
CIS Amazon Web Services Three-tier Web Architecture Benchmark (1.0.0) Amazon Web Services
Center for Internet Security (CIS)
06/24/2024 Prose - CIS Amazon Web Services Three-tier Web Architecture Benchmark v1.0.0
CIS Oracle Solaris 11.1 Benchmark (1.0.0) Oracle Solaris 11.1
Center for Internet Security (CIS)
06/10/2024 Prose - CIS Oracle Solaris 11.1 Benchmark v1.0.0
CIS Google Container-Optimized OS Benchmark (1.2.0) Google Container-Optimized OS
Center for Internet Security (CIS)
06/10/2024 Prose - CIS Google Container-Optimized OS Benchmark v1.2.0
Google Cloud Platform Foundations Benchmark (3.0.0) Google Cloud Platform
Center for Internet Security (CIS)
05/07/2024 Prose - Google Cloud Platform Foundations Benchmark
CIS IBM WebSphere Liberty Benchmark (1.0.0) IBM WebSphere Liberty
Center for Internet Security (CIS)
04/30/2024 Prose - CIS IBM WebSphere Liberty Benchmark v1.0.0
CIS Ubuntu Linux 16.04 LTS Benchmark (2.0.0) Canonical Ubuntu 16.04 LTS (Long Term Support)
Center for Internet Security (CIS)
04/30/2024 Prose - CIS Ubuntu Linux 16.04 LTS Benchmark v2.0.0
CIS IBM Cloud Foundations Benchmark (1.1.0) IBM Cloud CLI
Center for Internet Security (CIS)
04/30/2024 Prose - CIS IBM Cloud Foundations Benchmark v1.1.0
CIS Oracle Solaris 11.4 Benchmark (1.1.0) Oracle Solaris 11.4
Center for Internet Security (CIS)
04/30/2024 Prose - CIS Oracle Solaris 11.4 Benchmark v1.1.0
CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark (1.8.1) Microsoft Windows 10 1909
Center for Internet Security (CIS)
04/30/2024 Prose - CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark v1.8.1
* This checklist is still undergoing review for inclusion into the NCP.