U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Checklist Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 804 matching records. Displaying matches 141 through 160.

Name (Version) Target Authority Last Modified Resources
EDB Postgres Advanced Server v11 for Windows STIG (Ver 2, Rel 4) EDB Postgres Advanced Server
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Sunset - EDB Postgres Advanced Server v11 on Windows STIG - Ver 2, Rel 4
DBN-6300 STIG (Y24M07) DB Networks DBN-3600
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Sunset - DBN 6300 STIG
CA API Gateway STIG (Y24M07) COMPUTER ASSOCIATES (CA) APPLICATION PROGRAMMING INTERFACE (API) GATEWAY
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Sunset - CA API Gateway STIG
Arista Multilayer Switch (MLS) DCS-7000 Series (Y24M07) Arista Multilayer Switch (MLS) DCS-7050T
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Sunset - Arista MultiLayer Switch DCS 7000 Series STIG
Google Android 14 STIG (Y24M07) Google Android 14
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Google Android 14 STIG
Apache Server 2.4 UNIX STIG (Y24M07) Apache HTTP Server 2.4.0
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Apache Server 2.4 Unix STIG
Juniper Router STIG (Y24M07) Juniper JunOS
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Juniper Router STIG
Arista MLS EOS 4.2x STIG (Y24M07) Arista Multi-Layer Switch Extensible Operating System (MLS EOS) 4.2
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Arista MLS EOS 4.2x STIG
A10 Networks Application Delivery Controller (ADC) (Y24M07) A10 Networks Application Delivery Controller
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Sunset - A10 Networks ADC STIG
Splunk Enterprise 7.x for Windows STIG (Ver 3, Rel 1) Splunk Enterprise 7.0
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Splunk Enterprise 7.x for Windows STIG - Ver 3, Rel 1
Red Hat OpenShift Container Platform 4.12 STIG (Ver 2, Rel 1) Red Hat OpenShift Container Platform 4.12
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Red Hat OpenShift Container Platform 4.12 STIG - Ver 2, Rel 1
Rancher Government Solutions Multi-Cluster Manager STIG (Ver 2, Rel 1) Kubernetes
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Rancher Government Solutions Multi-Cluster Manager STIG - Ver 2, Rel 1
Riverbed NetProfiler STIG (Ver 2, Rel 1) Riverbed NetProfiler
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Riverbed NetProfiler STIG - Ver 2, Rel 1
Splunk Enterprise 8.x for Linux (Ver 2, Rel 1) Splunk Enterprise 8.0.0
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Splunk Enterprise 8.x for Linux STIG - Ver 2, Rel 1
Tanium 7.x STIG (Ver 2, Rel 1) Tanium 7.x
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Tanium 7.x STIG - Ver 2, Rel 1
Palo Alto Networks Prisma Cloud Compute STIG (Ver 2, Rel 1) Palo Alto Networks Prisma Cloud Compute
Defense Information Systems Agency
08/08/2024 Standalone XCCDF 1.1.4 - Palo Alto Networks Prisma Cloud Compute STIG - Ver 2, Rel 1
Microsoft Windows Privileged Access Workstation (PAW) STIG (Ver 3, Rel 1) Microsoft Windows Dedicated Administrative Workstation
Defense Information Systems Agency
08/07/2024 Standalone XCCDF 1.1.4 - Microsoft Windows PAW STIG - Ver 3, Rel 1
VMware vSphere 8.0 STIG (Y24M08) VMware vSphere 8.0
Defense Information Systems Agency
08/07/2024 Standalone XCCDF 1.1.4 - VMware vSphere 8.0 STIG
Trellix Application Control 8.x STIG (Ver 3, Rel 1) Trellix Application and Change Control
Defense Information Systems Agency
08/07/2024 Standalone XCCDF 1.1.4 - Trellix Application Control 8.x STIG - Ver 3, Rel 1
Ivanti MobileIron Sentry 9.x STIG (Y24M07) Ivanti MobileIron Sentry 9.x
Defense Information Systems Agency
08/07/2024 Standalone XCCDF 1.1.4 - Ivanti MobileIron Sentry 9.x STIG
* This checklist is still undergoing review for inclusion into the NCP.