Checklist Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 558 matching records. Displaying matches 181 through 200.

Name (Version) Target Authority Last Modified Resources
Microsoft Windows Privileged Access Workstation (PAW) STIG (Version 1, Release 3) Microsoft Windows Dedicated Administrative Workstation
Defense Information Systems Agency
06/09/2020 Standalone XCCDF 1.1.4 - Microsoft Windows Privileged Access Workstation (PAW) STIG - Ver 1, Rel 3
Bromium Secure Platform Secure Configuation Checklist (4.0) Bromium Secure Platform 4.0
Bromium
05/19/2020 ZIP - Bromium Secure Checklist Policy
Prose - Bromium Secure Configuration Checklist
Samsung Android OS 10 with Knox 3.x STIG (Ver 1, Rel 1) Samsung Android OS 10.0
Defense Information Systems Agency
05/15/2020 Standalone XCCDF 1.1.4 - Samsung Android OS 10 with Knox 3.x STIG - Ver 1, Rel 1
Samsung Android OS 7 (with Knox 2.x) STIG (Ver 1, Rel 7) Samsung Android OS 7
Defense Information Systems Agency
04/29/2020 Standalone XCCDF 1.1.4 - Sunset - Samsung Android OS 7 with Knox 2.x STIG - Ver 1, Rel 7
McAfee VSEL 1.9/2.0 STIG (Version 1, Release 1) McAfee VirusScan Enterprise for Linux 1.9x
McAfee VirusScan Enterprise for Linux 2.0x
Defense Information Systems Agency
04/29/2020 Standalone XCCDF 1.1.4 - McAfee VSEL 1.9/2.0 STIG
CIS Oracle Database 12c Benchmark (3.0.0) Oracle Database 12c
Oracle Database 12c Release 2
Center for Internet Security (CIS)
04/29/2020 Prose - CIS Oracle Database Server 12c Benchmark v3.0.0
Video Services Policy STIG (Version 1, Release 11) PolyCom CMA 5000
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - Video Services Policy STIG - Ver 1, Rel 11
Symantec ProxySG STIG (Ver 1 Rel 2) Symantec ProxySG
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - Symantec ProxySG STIG
Microsoft Windows 10 Mobile STIG (Ver 1, Rel 4) Microsoft Windows 10 Mobile
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 10 Mobile STIG - Ver 1, Rel 4
Citrix XenDesktop 7.x STIG (1.0) Citrix XenDesktop 7.x
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - Citrix XenDesktop 7.x STIG
Tanium 6.5 STIG (Version 1, Release 3) TANIUM 6.5
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - Sunset Tanium 6.5 STIG - Ver 1, Rel 3
VMware AirWatch v9.x MDM STIG (Version 1, Release 2) VMware AirWatch v9.x
Defense Information Systems Agency
04/24/2020 Standalone XCCDF 1.1.4 - Sunset - VMware AirWatch v9.x MDM STIG - Ver 1, Rel 2
CIS Google Cloud Platform Foundation Benchmark (1.1.0) Google Cloud Computing Platform
Center for Internet Security (CIS)
04/13/2020 Prose - CIS Google Cloud Platform Foundation Benchmark v1.1.0
Network Other Devices (Version 8, Release 23) Cisco Content Services Switch 11000
ISC Bind 9.3.1
ISC Bind 9.3.2
Microsoft Windows 2000
Microsoft Windows Server 2000
Microsoft Windows Server 2003
Microsoft Windows XP
Defense Information Systems Agency
03/16/2020 Standalone XCCDF 1.1.4 - Sunset - Network Other Devices STIG - Ver 8, Rel 23
Network L2 Switch STIG (Version 8, Release 27) Cisco PIX ASA
Foundry Networks BigIron Router
Juniper Router M10
Juniper Router M16
Juniper Router M20
Juniper Router M40
Juniper Router M5
Defense Information Systems Agency
03/16/2020 Standalone XCCDF 1.1.4 - Sunset - Network Layer 2 Switch STIG - Ver 8, Rel 27
DoD Consensus Security Configuration Checklist for Microsoft IE 8 (1.0) Microsoft Internet Explorer 8
Department of Defense
03/12/2020 Prose - D0D IE 8 security recommendations
DoD Consensus Security Configuration Checklist for Apple Mac OS 10.5 (Leopard) (1.0) Apple Mac OS X 10.5
Department of Defense
03/12/2020 Prose - Apple Mac OS 10.5 security recommendations
DoD - Microsoft Internet Explorer 9 Settings (31May2011) Microsoft Internet Explorer 9
Department of Defense
03/12/2020 Prose - Microsoft Internet Explorer - Final Draft DoD Internet Explorer 9 Settings
DoD - Microsoft Office 2010 Settings (21April2011) Microsoft Office 2010
Department of Defense
03/12/2020 GPOs - Microsoft Office 2010 Version 1.0 - DRAFT Office 2010 GPO
Prose - Microsoft Office 2010 - DoD Master Office 2010 Settings
Microsoft Windows 2008 Server DNS STIG (Version 1, Release 8) Windows 2008 Server DNS
Defense Information Systems Agency
03/05/2020 Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 Server DNS STIG - Ver 1, Rel 8
* This checklist is still undergoing review for inclusion into the NCP.