U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Checklist Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 588 matching records. Displaying matches 161 through 180.

Name (Version) Target Authority Last Modified Resources
Microsoft Exchange Server 2013 (Y21M12) Microsoft Exchange Server 2013
Defense Information Systems Agency
01/14/2022 Standalone XCCDF 1.1.4 - Microsoft Exchange 2013 STIG
Apple OS/iPad OS 14 STIG (Ver 1, Rel 2) Apple iPad OS/iOS 14.0
Defense Information Systems Agency
01/10/2022 Standalone XCCDF 1.1.4 - Apple iOS/iPad OS 14 STIG - Ver 1, Rel 2
Apple OS/iPad OS 13 STIG (Ver 2, Rel 1) Apple iOS 13.0
Defense Information Systems Agency
01/10/2022 Standalone XCCDF 1.1.4 - Sunset - Apple iOS/iPad OS 13 STIG - Ver 2, Rel 1
CA IDMS STIG (Ver 1, Rel 1) Broadcom CA IDMS
Defense Information Systems Agency
01/06/2022 Standalone XCCDF 1.1.4 - CA IDMS STIG - Ver 1, Rel 1
VMWare Workspace ONE UEM STIG (Ver 2, Rel 1) Workspace ONE Unified Endpoint Management
Defense Information Systems Agency
12/17/2021 Standalone XCCDF 1.1.4 - VMware Workspace ONE UEM STIG- Ver 2, Rel 1
Ivanti MobileIron Sentry 9.x STIG (Ver 1 Rel 1) Ivanti MobileIron Sentry 9.x
Defense Information Systems Agency
12/06/2021 Standalone XCCDF 1.1.4 - Ivanti MobileIron Sentry 9.x STIG - Ver 1 Rel 1
Google Android 12 STIG (Ver 1, Rel 1) Google Android 12
Defense Information Systems Agency
12/06/2021 Standalone XCCDF 1.1.4 - Google Android 12 STIG - Ver 1, Rel 1
Active Directory Domain STIG (Ver 3, Rel 1) Microsoft Active Directory
Defense Information Systems Agency
11/26/2021 Standalone XCCDF 1.1.4 - Active Directory Domain STIG - Ver 3, Rel 1
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.44/71,6.45/72 and 6.46/73) IBM z/OS Version 2, Release 3
IBM z/OS Version 2, Release 4
IBM z/OS Version 2, Release 5
Vanguard Integrity Professionals, Inc.
11/24/2021 ZIP - Vanguard z/OS RACF Checklist 6.44/7.1 PDF version
ZIP - Vanguard z/OS RACF Checklist 6.45/7.2 PDF version
ZIP - Vanguard z/OS RACF Checklist 6.46/7.3 PDF version
ZIP - Vanguard z/OS RACF Checklist 6.44/7.1 XML version
ZIP - Vanguard z/OS RACF Checklist 6.45/7.2 XML version
ZIP - Vanguard z/OS RACF Checklist 6.46/7.3 XML version
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.47-8.1) IBM z/OS Version 2, Release 3
IBM z/OS Version 2, Release 4
IBM z/OS Version 2, Release 5
Vanguard Integrity Professionals, Inc.
11/24/2021 ZIP - Vanguard z/OS RACF Checklist 6.47/8.1 PDF version
ZIP - Vanguard z/OS RACF Checklist 6.47/8.1 XML version
Vanguard Compliance Manager z/OS RACF Checklist for completing a automated SRR Audit for Stig (6.44/71,6.45/72 and 6.46/73) IBM z/OS Version 2, Release 4
IBM z/OS Version 2, Release 5
Vanguard Integrity Professionals, Inc.
11/24/2021 ZIP - Vanguard z/OS RACF Checklist 6.44-6.46/7.1-7.3(For Z/OS V2R4 release)
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.48-8.2) IBM z/OS Version 2, Release 3
IBM z/OS Version 2, Release 4
IBM z/OS Version 2, Release 5
Vanguard Integrity Professionals, Inc.
11/24/2021 ZIP - Vanguard z/OS RACF Checklist 6.48/8.2 PDF version
ZIP - Vanguard z/OS RACF Checklist 6.47/8.1 XML version
Vanguard Compliance Manager z/OS RACF Checklist for completing a automated SRR Audit for Stig (6.43) IBM z/OS Version 2, Release 2
IBM z/OS Version 2, Release 3
IBM z/OS Version 2, Release 4
IBM z/OS Version 2, Release 5
Vanguard Integrity Professionals, Inc.
11/24/2021 ZIP - Vanguard z/OS RACF Checklist 6.43(For Z/OS V2R2 release)
ZIP - Vanguard z/OS RACF Checklist 6.43(For Z/OS V2R3 release)
ZIP - Vanguard z/OS RACF Checklist 6.43(For Z/OS V2R4 release)
Vanguard Compliance Manager z/OS RACF ACF2 TSS Checklist for completing a manual SRR Audit for Stig (6.43) IBM z/OS Version 2, Release 2
IBM z/OS Version 2, Release 3
IBM z/OS Version 2, Release 4
IBM z/OS Version 2, Release 5
Vanguard Integrity Professionals, Inc.
11/24/2021 ZIP - Vanguard z/OS RACF Checklist 6.43 PDF version
ZIP - Vanguard z/OS RACF Checklist 6.43 XML version
ZIP - Vanguard z/OS RACF Checklist 6.43 PDF version for ACF2
ZIP - Vanguard z/OS RACF Checklist 6.43 PDF version for TSS
ZIP - Vanguard z/OS RACF Checklist 6.43 XML version for ACF2
ZIP - Vanguard z/OS RACF Checklist 6.43 XML version for TSS
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.49-8.3) IBM z/OS Version 2, Release 3
IBM z/OS Version 2, Release 4
IBM z/OS Version 2, Release 5
Vanguard Integrity Professionals, Inc.
11/24/2021 ZIP - Vanguard z/OS RACF Checklist 6.49/8.3 PDF version
ZIP - Vanguard z/OS RACF Checklist 6.49/8.3 XML version
IBM WebSphere Liberty Server STIG (Ver 1 Rel 1) IBM WebSphere Liberty Server
Defense Information Systems Agency
11/05/2021 Standalone XCCDF 1.1.4 - IBM WebSphere Liberty Server STIG - Ver 1 Rel 1
Apache Server 2.4 Windows STIG (Y21M10) Apache HTTP Server 2.4.0
Defense Information Systems Agency
10/29/2021 Standalone XCCDF 1.1.4 - Apache Server 2.4 Windows STIG
ESXi 5 Virtual Machine STIG (Version 2 Release 1) VMware ESXi 5.0
VMware ESXi 5.0 Update 1
VMware ESXi 5.0 Update 2
VMware ESXi 5.1
Defense Information Systems Agency
10/29/2021 Standalone XCCDF 1.1.4 - Sunset - VMware ESXi 5 Virtual Machine STIG - Version 2, Release 1
ESXi 5 vCenter Server STIG (Version 2 Release 1) VMware VCenter Server 5.0
Defense Information Systems Agency
10/29/2021 Standalone XCCDF 1.1.4 - Sunset - VMware ESXi 5 vCenter Server STIG - Version 2, Release 1
ESXi 5 Server STIG (Version 2, Release 1) VMware ESXi 5.0
VMware ESXi 5.0 Update 1
VMware ESXi 5.0 Update 2
VMware ESXi 5.1
Defense Information Systems Agency
10/29/2021 Standalone XCCDF 1.1.4 - Sunset - VMware ESXi 5 Server STIG - Version 2, Release 1
* This checklist is still undergoing review for inclusion into the NCP.