Checklist Repository
The National Checklist Program (NCP), defined by the NIST
SP 800-70, is the U.S. government repository of publicly available
security checklists (or benchmarks) that provide detailed low level
guidance on setting the security configuration of operating systems
and applications.
NCP provides metadata and links to checklists of various formats
including checklists that conform to the Security
Content Automation Protocol (SCAP). SCAP enables validated
security products to automatically perform configuration checking
using NCP checklists. For more information relating to the NCP please
visit the information page or
the glossary of terms.
Please note that the current search fields have been adjusted to
reflect NIST SP 800-70 Revision 4.
Search for Checklists using the fields below. The keyword
search will search across the name, and summary.
There are 631
matching records. Displaying matches 1 through 20.
Name (Version) |
Target |
Authority |
Last Modified |
Resources |
F5 BIG-IP 11.x STIG (Y23M11) |
F5 BIG-IP Access Policy Manager (APM) 11.x STIG
|
Defense Information Systems Agency
|
11/24/2023 |
Standalone XCCDF 1.1.4 - F5 BIG-IP 11.x STIG
|
Apple iOS/iPadOS 17 STIG (Ver 1, Rel 1) |
Apple iOS 17.0
|
Defense Information Systems Agency
|
11/20/2023 |
Standalone XCCDF 1.1.4 - Apple iOS/iPadOS 17 STIG - Ver 1, Rel 1
|
Ivanti Connect Secure STIG (Y23M11) |
Ivanti Connect Secure
|
Defense Information Systems Agency
|
11/17/2023 |
Standalone XCCDF 1.1.4 - Ivanti Connect Secure STIG
|
Samsung Android 14 with Knox 3.x STIG (Y23M11) |
Google Android 14
|
Defense Information Systems Agency
|
11/15/2023 |
Standalone XCCDF 1.1.4 - Samsung Android 14 with Knox 3.x STIG
|
Google Android 14 STIG (Y23M10) |
Google Android 14
|
Defense Information Systems Agency
|
11/13/2023 |
Standalone XCCDF 1.1.4 - Google Android 14 STIG
|
Red Hat Enterprise Linux 9 (Ver 1, Rel 1) |
Red Hat Enterprise Linux 9.0
|
Defense Information Systems Agency
|
11/13/2023 |
Standalone XCCDF 1.1.4 - Red Hat Enterprise Linux 9 STIG - Ver 1, Rel 1
|
iOS/iPadOS 17 Guidance (Revision 1.0) |
Apple iOS 17.0
|
NIST, macOS Security Compliance Project
|
11/13/2023 |
ZIP - iOS/iPadOS 17 Guidance, Revision 1
|
iOS/iPadOS 16 16 Guidance (Revision 1.0) |
Apple iOS/iPadOS 16
|
NIST, macOS Security Compliance Project
|
11/13/2023 |
ZIP - iOS/iPadOS 16 Guidance, Revision 1.0
|
Google Android 13 BYOAD STIG (Y23M10) |
Google Android 13
|
Defense Information Systems Agency
|
11/13/2023 |
Standalone XCCDF 1.1.4 - Google Android 13 BYOAD STIG
|
Microsoft Windows 2012 and 2012 R2 STIG (Ver 3, Rel 6) |
Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2
|
Defense Information Systems Agency
|
11/09/2023 |
SCAP 1.2 Content - Sunset - Microsoft Windows Server 2012 and 2012 R2 DC STIG Benchmark - Ver 3, Rel 6
SCAP 1.2 Content - Sunset - Microsoft Windows Server 2012 and 2012 R2 MS STIG Benchmark - Ver 3, Rel 6
Automated Content - SCC 5.8 Windows
GPOs - Group Policy Objects (GPOs) - October 2023
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2012 and 2012 R2 DC STIG - Ver 3, Rel 7
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2012 and 2012 R2 MS STIG - Ver 3, Rel 7
|
Windows Firewall STIG and Advanced Security STIG (Ver 2, Rel 2) |
windows firewall
|
Defense Information Systems Agency
|
11/09/2023 |
SCAP 1.2 Content - Microsoft Windows Defender Firewall with Advanced Security STIG Benchmark - Ver 2, Rel 3
Automated Content - SCC 5.8 Windows
GPOs - Group Policy Objects (GPOs) - October 2023
Standalone XCCDF 1.1.4 - Microsoft Windows Defender Firewall with Advanced Security STIG - Ver 2, Rel 2
|
VMware vSphere 8.0 STIG (Y23M10) |
VMware vSphere 8.0
|
Defense Information Systems Agency
|
11/09/2023 |
Standalone XCCDF 1.1.4 - VMware vSphere 8.0 STIG
|
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.58-12) |
IBM z/OS Version 2, Release 4 IBM z/OS Version 2, Release 5
|
Vanguard Integrity Professionals, Inc.
|
11/05/2023 |
ZIP - Vanguard z/OS RACF Checklist 6.58/8.12 PDF version
ZIP - Vanguard z/OS RACF Checklist 6.58/12 XML version
|
Microsoft Outlook 2016 STIG (Version 2, Release 3) |
Microsoft Outlook 2016
|
Defense Information Systems Agency
|
11/03/2023 |
GPOs - Group Policy Objects (GPOs) - October 2023
Standalone XCCDF 1.1.4 - Microsoft Outlook 2016 STIG - Ver 2, Rel 3
|
Microsoft Word 2016 STIG (Version 1, Release 2) |
Microsoft Word 2016
|
Defense Information Systems Agency
|
11/03/2023 |
GPOs - Group Policy Objects (GPOs) - October 2023
Standalone XCCDF 1.1.4 - Microsoft Word 2016 STIG - Ver 1, Rel 1
|
Microsoft Visio 2016 STIG (Version 1, Release 2) |
Microsoft Visio 2016
|
Defense Information Systems Agency
|
11/03/2023 |
GPOs - Group Policy Objects (GPOs) - October 2023
Standalone XCCDF 1.1.4 - Microsoft Visio 2016 STIG - Ver 1, Rel 1
|
Excel 2013 STIG (Version 1, Release 7) |
Microsoft Excel 2013
|
Defense Information Systems Agency
|
11/03/2023 |
GPOs - Group Policy Objects (GPOs) - October 2023
Standalone XCCDF 1.1.4 - Microsoft Excel 2013 STIG - Ver 1, Rel 7
|
Oracle Linux 8 STIG (Ver 1, Rel 8) |
Oracle Linux 8.0
|
Defense Information Systems Agency
|
11/03/2023 |
SCAP 1.2 Content - Oracle Linux 8 STIG Benchmark - Ver 1, Rel 7
Standalone XCCDF 1.1.4 - Oracle Linux 8 STIG - Ver 1, Rel 8
Standalone XCCDF 1.1.4 - Oracle Linux 8 STIG for Ansible - Ver 1, Rel 8
|
Adobe Acrobat Professional DC Continuous Track STIG (Ver 2, Rel 1) |
Adobe Acrobat Pro DC Continuous Track
|
Defense Information Systems Agency
|
11/03/2023 |
GPOs - Group Policy Objects (GPOs) - October 2023
Standalone XCCDF 1.1.4 - Adobe Acrobat Professional DC Continuous Track STIG - Ver 2, Rel 1
|
Microsoft Windows 10 STIG (Version 2, Release 7) |
Microsoft Windows 10
|
Defense Information Systems Agency
|
11/03/2023 |
SCAP 1.2 Content - Microsoft Windows 10 STIG Benchmark - Ver 2, Rel 9
Automated Content - SCC 5.8 Windows
GPOs - Group Policy Objects (GPOs) - October 2023
Standalone XCCDF 1.1.4 - Microsoft Windows 10 STIG - Ver 2, Rel 8
|
* This checklist is still undergoing review for
inclusion into the NCP.