Checklist Repository
The National Checklist Program (NCP), defined by the NIST
SP 800-70, is the U.S. government repository of publicly available
security checklists (or benchmarks) that provide detailed low level
guidance on setting the security configuration of operating systems
and applications.
NCP provides metadata and links to checklists of various formats
including checklists that conform to the Security
Content Automation Protocol (SCAP). SCAP enables validated
security products to automatically perform configuration checking
using NCP checklists. For more information relating to the NCP please
visit the information page or
the glossary of terms.
Please note that the current search fields have been adjusted to
reflect NIST SP 800-70 Revision 4.
Search for Checklists using the fields below. The keyword
search will search across the name, and summary.
There are 828
matching records. Displaying matches 141 through 160.
Name (Version) |
Target |
Authority |
Last Modified |
Resources |
Sequoia Guidance (Revision 1.1) |
Apple MacOS 15.0
|
NIST, macOS Security Compliance Project
|
12/19/2024 |
SCAP 1.3 Content - Sequoia Guidance, Revision 1.0
|
Sonoma Guidance (Revision 3.1) |
Apple macOS 14.0
|
NIST, macOS Security Compliance Project
|
12/19/2024 |
SCAP 1.3 Content - Sonoma Guidance, Revision 3.1
|
Ventura Guidance (Revision 5.1) |
Apple macOS 13.0 (Ventura)
|
NIST, macOS Security Compliance Project
|
12/19/2024 |
SCAP 1.3 Content - Ventura Guidance, Revision 5.1
|
Ivanti MobileIron Core MDM Server STIG (Ver 2, Rel 1) |
Ivanti MobileIron Core
|
Defense Information Systems Agency
|
12/17/2024 |
Standalone XCCDF 1.1.4 - Ivanti MobileIron Core MDM Server STIG - Ver 2, Rel 1
|
Excel 2010 STIG (Version 1, Release 11) |
Microsoft Excel 2010
|
Defense Information Systems Agency
|
12/17/2024 |
Standalone XCCDF 1.1.4 - Microsoft Excel 2010 STIG - Ver 1, Rel 11
|
Tri-Lab Operating System Stack (TOSS) 4 STIG Benchmark (Ver 2, Rel 2) |
Tri-Lab Operating System Stack (TOSS)
|
Defense Information Systems Agency
|
12/12/2024 |
SCAP 1.3 Content - Tri-Lab Operating System Stack (TOSS) 4 STIG Benchmark - Ver 2, Rel 2
SCAP 1.2 Content - Sunset - TOSS 4 STIG Benchmark - Ver 1, Rel 3
Standalone XCCDF 1.1.4 - Rev. 4 Sunset - Tri-Lab Operating System Stack (TOSS) 4 STIG - Ver 1, Rel 3
|
Apple macOS 12 (Monterey) STIG (Ver 1, Rel 9) |
Apple macOS 12.0 (Monterey)
|
Defense Information Systems Agency
|
12/09/2024 |
Standalone XCCDF 1.1.4 - Sunset - Apple macOS 12 STIG - Ver 1, Rel 9
|
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.61-91) |
IBM z/OS Version 2, Release 4 IBM z/OS Version 2, Release 5
|
Vanguard Integrity Professionals, Inc.
|
11/29/2024 |
ZIP - Vanguard z/OS RACF Checklist 6.61/91 XML version
ZIP - Vanguard z/OS RACF Checklist 6.61/91 PDF version
|
CIS Microsoft SQL Server 2019 (1.3.0) |
Microsoft SQL Server 2019
|
Center for Internet Security (CIS)
|
11/14/2024 |
Prose - CIS Microsoft SQL Server 2019 Benchmark v1.3.0
|
NetApp ONTAP DSC 9.X STIG (Ver 2, Rel 2) |
NetApp ONTAP DSC 9.x
|
Defense Information Systems Agency
|
11/05/2024 |
Standalone XCCDF 1.1.4 - NetApp ONTAP DSC 9.x STIG - Ver 2, Rel 2
|
Microsoft Azure SQL Database STIG (Ver 2, Rel 2) |
Microsoft Azure
|
Defense Information Systems Agency
|
11/05/2024 |
Standalone XCCDF 1.1.4 - Microsoft Azure SQL Database STIG - Ver 2, Rel 2
|
MarkLogic Server v9 STIG (Ver 3, Rel 2) |
MarkLogic Server v9
|
Defense Information Systems Agency
|
11/05/2024 |
Standalone XCCDF 1.1.4 - MarkLogic Server v9 STIG - Ver 3, Rel 2
|
CA IDMS STIG (Ver 2, Rel 1) |
Broadcom CA IDMS
|
Defense Information Systems Agency
|
11/05/2024 |
Standalone XCCDF 1.1.4 - CA IDMS STIG - Ver 2, Rel 1
|
ISEC7 Sphere STIG (Ver 3, Rel 1) |
iSEC7 Enterprise Mobility Management 6.0
|
Defense Information Systems Agency
|
11/05/2024 |
Standalone XCCDF 1.1.4 - ISEC7 Sphere STIG - Ver 3, Rel 1
|
Active Directory Forest STIG (Ver 2, Rel 8) |
Microsoft Active Directory
|
Defense Information Systems Agency
|
11/05/2024 |
Standalone XCCDF 1.1.4 - Active Directory Forest STIG - Ver 3, Rel 1
|
IBM AIX 7.X STIG (Ver 3, Rel 1) |
IBM AIX 7.1 IBM AIX 7.2
|
Defense Information Systems Agency
|
11/05/2024 |
Standalone XCCDF 1.1.4 - IBM AIX 7.x STIG - Ver 3, Rel 1
|
IBM Hardware Management Console (HMC) STIG (Ver 2, Rel 1) |
IBM z/OS Version 1 Release 10 IBM z/OS Version 1 Release 11 IBM z/OS Version 1 Release 12
|
Defense Information Systems Agency
|
11/05/2024 |
Standalone XCCDF 1.1.4 - IBM Hardware Management Console (HMC) STIG - Ver 2, Rel 1
|
Active Directory Domain STIG (Ver 3, Rel 5) |
Microsoft Active Directory
|
Defense Information Systems Agency
|
11/05/2024 |
Standalone XCCDF 1.1.4 - Active Directory Domain STIG - Ver 3, Rel 5
|
Redis Enterprise 6.x STIG (Ver 2, Rel 2) |
Redis Enterprise 6.0
|
Defense Information Systems Agency
|
11/04/2024 |
Standalone XCCDF 1.1.4 - Redis Enterprise 6.x STIG - Ver 2, Rel 2
|
Oracle MySQL 8.0 STIG (Ver 2, Rel 2) |
Oracle MySQL 8.0
|
Defense Information Systems Agency
|
11/04/2024 |
Standalone XCCDF 1.1.4 - Oracle MySQL 8.0 STIG - Ver 2, Rel 2
|
* This checklist is still undergoing review for
inclusion into the NCP.