Checklist Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 558 matching records. Displaying matches 141 through 160.

Name (Version) Target Authority Last Modified Resources
Sharepoint Designer 2013 STIG (Version 1, Release 3) Microsoft SharePoint Designer 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Sharepoint Designer 2013 STIG - Ver 1, Rel 3
Microsoft Visio 2016 STIG (Version 1, Release 2) Microsoft Visio 2016
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Visio 2016 STIG - Ver 1, Rel 1
Visio 2013 STIG (Version 1, Release 4) Microsoft Visio 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Visio 2013 STIG - Ver 1, Rel 4
Lync 2013 STIG (Version 1, Release 4) Microsoft Lync 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Lync 2013 STIG - Ver 1, Rel 4
Project 2013 STIG (Version 1, Release 4) Microsoft Project 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Project 2013 STIG - Ver 1, Rel 4
OneNote 2013 STIG (Version 1, Release 3) Microsoft OneNote 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft OneNote 2013 STIG - Ver 1, Rel 3
Microsoft Skype for Business 2016 STIG (Version 1, Release 2) Microsoft Skype for Business 2016
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Skype for Business 2016 STIG - Ver 1, Rel 1
Microsoft Access 2016 STIG (Version 1, Release 2) Microsoft Access 2016
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Access 2016 STIG - Ver 1, Rel 1
Microsoft Access 2013 STIG (Version 1, Release 6) Access 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Access 2013 STIG - Ver 1, Rel 6
Microsoft Publisher 2016 STIG (Version 1, Release 4) Microsoft Publisher 2016
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Publisher 2016 STIG - Ver 1, Rel 3
PowerPoint 2013 STIG (Version 1, Release 6) Microsoft Power Point 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft PowerPoint 2013 STIG - Ver 1, Rel 6
Excel 2013 STIG (Version 1, Release 7) Microsoft Excel 2013
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - Microsoft Excel 2013 STIG - Ver 1, Rel 7
Adobe Acrobat Pro DC Classic Track STIG (Ver 2, Rel 1) Adobe Acrobat Pro DC Classic Track
Defense Information Systems Agency
10/29/2020 GPOs - Group Policy Objects (GPOs) - October 2020
Standalone XCCDF 1.1.4 - Sunset - Adobe Acrobat Pro DC Classic Track STIG - Ver 2, Rel 1
McAfee Application Control STIG (Ver 2, Rel 1) McAfee Application Control 7.0.0
Defense Information Systems Agency
10/29/2020 Standalone XCCDF 1.1.4 - McAfee Application Control STIG - Ver 1, Rel 3
Standalone XCCDF 1.1.4 - McAfee Application Control 8.x STIG - Ver 2, Rel 1
F5 BIG-IP 11.x STIG (Ver 1, Rel 5) F5 BIG-IP Access Policy Manager (APM) 11.x STIG
Defense Information Systems Agency
10/28/2020 Standalone XCCDF 1.1.4 - F5 BIG-IP 11.x STIG
NIST National Checklist for Red Hat Virtualization Host 4.x (content v0.1.48) Red Hat Virtualization Host 4.3
Red Hat
10/26/2020 SCAP 1.3 Content - NIST National Checklist for Red Hat Virtualization Host 4.x
Ansible Playbook - [DRAFT] DISA STIG for Red Hat Virtualization Host (RHVH)
Ansible Playbook - VPP - Protection Profile for Virtualization v. 1.0 for Red Hat Virtualization Hypervisor (RHVH)
Machine-Readable Format - OpenControl-formatted NIST 800-53 responses for Red Hat Virtualization Host 4.x
OpenShift 3.x on Azure for Government (FedRAMP Moderate) (v1) Red Hat OpenShift Container Platform 3.10
Red Hat OpenShift Container Platform 3.11
Red Hat OpenShift Container Platform 3.5
Red Hat OpenShift Container Platform 3.6
Red Hat OpenShift Container Platform 3.7
Red Hat OpenShift Container Platform 3.8
Red Hat OpenShift Container Platform 3.9
Red Hat
10/26/2020 Security Template - OpenShift Container Platform 3.x on Azure for Government, FedRAMP Moderate SSP Template
Security Template - Ansible Playbooks supporting the creation of either a multi-node full HA production cluster or a single node designed for exploration of OpenShift on Azure.
Prose - Deploying Red Hat OpenShift Container Platform 3 on Microsoft Azure
NIST National Checklist for Red Hat OpenShift Container Platform 3.x (content v0.1.48) Red Hat OpenShift Container Platform 3.10
Red Hat OpenShift Container Platform 3.11
Red Hat OpenShift Container Platform 3.5
Red Hat OpenShift Container Platform 3.6
Red Hat OpenShift Container Platform 3.7
Red Hat OpenShift Container Platform 3.8
Red Hat OpenShift Container Platform 3.9
Red Hat
10/26/2020 SCAP 1.3 Content - NIST National Checklist for Red Hat OpenShift Container Platform 3.x
Machine-Readable Format - OpenControl-formatted NIST 800-53/FISMA Applicability Guide for OpenShift 3.x
CIS Oracle Cloud Infrastructure Foundations Benchmark (1.0.0) Oracle Cloud Infrastructure
Center for Internet Security (CIS)
09/11/2020 Prose - CIS Oracle Cloud Infrastructure Foundations Benchmark version 1.0.0
Microsoft Excel 2016 STIG (Version 1, Release 3) Microsoft Excel 2016
Defense Information Systems Agency
09/04/2020 Standalone XCCDF 1.1.4 - Microsoft Excel 2016 STIG - Ver 1, Rel 2
* This checklist is still undergoing review for inclusion into the NCP.