Checklist Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 558 matching records. Displaying matches 161 through 180.

Name (Version) Target Authority Last Modified Resources
CIS Oracle Database 18c Benchmark (1.0.0) Oracle Database 18c
Center for Internet Security (CIS)
08/20/2020 Prose - CIS Oracle Database Server 18c Benchmark v1.0.0
CIS Amazon Web Services Foundations Benchmark (v1.3.0) Amazon Web Services
Center for Internet Security (CIS)
08/11/2020 Prose - CIS Amazon Web Services Foundations Benchmark version 1.3.0
BlackBerry UEM 12.10 STIG (Ver 1, Rel 1) BlackBerry UEM 12.10
Defense Information Systems Agency
08/10/2020 Standalone XCCDF 1.1.4 - Sunset - BlackBerry UEM 12.10 STIG - Ver 1, Rel 1
BlackBerry UEM 12.11 STIG (Ver 1, Rel 1) BlackBerry UEM 12.11
Defense Information Systems Agency
08/10/2020 Standalone XCCDF 1.1.4 - Sunset - BlackBerry UEM 12.11 STIG - Ver 1, Rel 1
Samsung Android OS 9 (with Knox 3.x) STIG (Ver 1, Rel 1) Samsung Android OS 9.0
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Samsung Android OS 9 with Knox 3.x STIG
HP FlexFabric Switch Router STIG (1.0) HP FlexFabric
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - HP FlexFabric Switch STIG
Samsung Android OS 8 (with Knox 3.x) STIG (Ver 1, Rel 3) Google Android 8.0
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Sunset - Samsung Android OS 8 with Knox 3.x STIG
Oracle HTTP Server 12.1.3 STIG (Version 1, Release 7) Oracle HTTP Server 12.1.3 STIG, Version 1, Release 1
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Oracle HTTP Server 12.1.3 STIG - Ver 1, Rel 7
MongoDB Enterprise Advanced 3.x STIG (Ver 1, Rel 2) MongoDB 3.2
MongoDB 3.4
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - MongoDB Enterprise Advanced 3.x STIG - Ver 1, Rel 2
BlackBerry Enterprise Mobility Server (BEMS) 2.x STIG (Ver 1, Rel 3) BlackBerry Enterprise Mobility Server (BEMS)
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - BlackBerry Enterprise Mobility Server (BEMS) 2.x STIG - Ver 1, Rel 3
Arista Multilayer Switch (MLS) DCS-7000 Series (Version 1, Release 3) Arista Multilayer Switch (MLS) DCS-7050T
Defense Information Systems Agency
08/04/2020 Standalone XCCDF 1.1.4 - Arista MLS DCS-7000 Series STIG
MarkLogic Server v9 STIG (Ver 1, Rel 1) MarkLogic Server v9
Defense Information Systems Agency
07/09/2020 Standalone XCCDF 1.1.4 - MarkLogic Server v9 STIG - Ver 1, Rel 1
CIS Microsoft SQL Server 2012 Benchmark (1.6.0) Microsoft SQL Server 2012
Center for Internet Security (CIS)
07/08/2020 Prose - CIS Microsoft SQL Server 2014 Benchmark v1.6.0
CIS Microsoft SQL Server 2014 Benchmark (1.5.0) Microsoft SQL Server 2014
Center for Internet Security (CIS)
07/08/2020 Prose - CIS Microsoft SQL Server 2014 Benchmark v1.5.0
CIS Microsoft SQL Server 2008 R2 Benchmark (1.7.0) Microsoft SQL Server 2008 R2
Center for Internet Security (CIS)
07/08/2020 Prose - CIS Microsoft SQL Server 2008 R2 Benchmark v1.7.0
Microsoft Windows 2008 R2 STIG (Version 1, Release 34) Microsoft Windows Server 2008 R2
Microsoft Windows Server 2008 R2 Service Pack 1
Microsoft Windows Server 2008 r2 Itanium
Microsoft Windows Server 2008 r2 Service Pack 1 Itanium
Microsoft Windows Server 2008 r2 x64
Microsoft Windows Server 2008 r2 x64 Service Pack 1
Defense Information Systems Agency
07/07/2020 SCAP 1.2 Content - Sunset - Microsoft Windows 2008 R2 DC STIG Benchmark - Ver 1, Rel 33
SCAP 1.2 Content - Sunset - Microsoft Windows 2008 R2 MS STIG Benchmark - Ver 1, Rel 34
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 R2 DC STIG - Ver 1, Rel 34
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 R2 MS STIG - Ver 1, Rel 33
Microsoft Windows 7 (Version 1, Release 36) Microsoft Windows 7
Defense Information Systems Agency
07/07/2020 SCAP 1.2 Content - Sunset - Microsoft Windows 7 STIG Benchmark - Ver 1, Rel 36
Machine-Readable Format - Sunset - Microsoft Windows 7 Audit Benchmark
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 7 STIG - Ver 1, Rel 32
Windows 2008 STIG (Version 6, Release 46) Microsoft Internet Explorer
Microsoft Windows Defender
Microsoft Windows Mail
Microsoft Windows Media Player
Microsoft Windows Server 2008
Defense Information Systems Agency
07/07/2020 SCAP 1.2 Content - Sunset - Microsoft Windows 2008 DC STIG Benchmark - Ver 6, Rel 45
SCAP 1.2 Content - Sunset - Microsoft Windows 2008 MS STIG Benchmark - Ver 6, Rel 45
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 DC STIG - Ver 6, Rel 47
Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 MS STIG - Ver 6, Rel 46
Vanguard Compliance Manager z/OS RACF Checklist for completing a automated SRR Audit for Stig (6.43) IBM z/OS Version 2, Release 2
IBM z/OS Version 2, Release 3
IBM z/OS Version 2, Release 4
Vanguard Integrity Professionals, Inc.
06/15/2020 ZIP - Vanguard z/OS RACF Checklist 6.43(For Z/OS V2R2 release)
ZIP - Vanguard z/OS RACF Checklist 6.43(For Z/OS V2R3 release)
ZIP - Vanguard z/OS RACF Checklist 6.43(For Z/OS V2R4 release)
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.42) IBM z/OS Version 2.2
IBM z/OS Version 2.3
Vanguard Integrity Professionals, Inc.
06/15/2020 ZIP - Vanguard z/OS RACF Checklist 6.42 PDF version
ZIP - Vanguard z/OS RACF Checklist 6.42 XML version
* This checklist is still undergoing review for inclusion into the NCP.