U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Checklist Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 789 matching records. Displaying matches 21 through 40.

Name (Version) Target Authority Last Modified Resources
Excel 2013 STIG (Version 1, Release 7) Microsoft Excel 2013
Defense Information Systems Agency
06/10/2024 GPOs - Group Policy Objects (GPOs) - April 2024
Standalone XCCDF 1.1.4 - Microsoft Excel 2013 STIG - Ver 1, Rel 7
Project 2013 STIG (Version 1, Release 4) Microsoft Project 2013
Defense Information Systems Agency
06/10/2024 GPOs - Group Policy Objects (GPOs) - April 2024
Standalone XCCDF 1.1.4 - Microsoft Project 2013 STIG - Ver 1, Rel 4
Microsoft Outlook 2013 STIG (Version 1, Release 13) Microsoft Outlook 2013
Defense Information Systems Agency
06/10/2024 GPOs - Group Policy Objects (GPOs) - April 2024
Standalone XCCDF 1.1.4 - Microsoft Outlook 2013 STIG - Ver 1, Rel 13
VMWare Horizon 7.13 STIG (Y24M04) VMWare Horizon
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - Sunset - VMware Horizon 7.13 STIG
Microsoft Excel 2016 STIG (Version 2, Release 1) Microsoft Excel 2016
Defense Information Systems Agency
06/10/2024 GPOs - Group Policy Objects (GPOs) - April 2024
Standalone XCCDF 1.1.4 - Microsoft Excel 2016 STIG - Ver 2, Rel 1
Red Hat 8 STIG (Ver 1, Rel 14) Red Hat Enterprise Linux 8.0
Defense Information Systems Agency
06/10/2024 SCAP 1.2 Content - Red Hat Enterprise Linux 8 STIG Benchmark - Ver 1, Rel 12
Automated Content - SCC 5.9 RHEL 7/Oracle Linux 7/SLES12/SLES 15 x86 64
Automated Content - SCC 5.9 RHEL 8/Oracle Linux 8 Aarch64
Automated Content - SCC 5.9 RHEL 8/Oracle Linux 8 x86 64
Automated Content - SCC 5.9 RHEL 9/Oracle Linux 9 x86 64
Standalone XCCDF 1.1.4 - Red Hat Enterprise Linux 8 STIG for Ansible - Ver 1, Rel 13
Standalone XCCDF 1.1.4 - Red Hat Enterprise Linux 8 STIG for Chef - Ver 1, Rel 13
Standalone XCCDF 1.1.4 - Red Hat Enterprise Linux 8 STIG - Ver 1, Rel 14
SUSE Linux Enterprise Server (SLES) 12 STIG (Ver 2, Rel 13) SUSE Linux Enterprise Server 12.0
Defense Information Systems Agency
06/10/2024 SCAP 1.2 Content - SUSE Linux Enterprise Server 12 STIG Benchmark - Ver 2, Rel 11
Standalone XCCDF 1.1.4 - SUSE Linux Enterprise Server 12 STIG - Ver 2, Rel 13
Microsoft Office System 2016 STIG (Version 2, Release 3) Microsoft Office 2016
Defense Information Systems Agency
06/10/2024 GPOs - Group Policy Objects (GPOs) - April 2024
Standalone XCCDF 1.1.4 - Microsoft Office System 2016 STIG - Ver 2, Rel 3
Rancher Government Solutions RKE2 STIG (Ver 1, Rel 5) Rancher RKE2
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - Rancher Government Solutions RKE2 STIG - Ver 1, Rel 5
Google Android 13 BYOAD STIG (Y24 M04) Google Android 13
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - Google Android 13 BYOAD STIG
Suse Linux Enterprise Server (SLES) 15 STIG (Version 1, Release 12) SUSE Enterprise Linux 15
Defense Information Systems Agency
06/10/2024 SCAP 1.2 Content - SUSE Linux Enterprise Server 15 STIG Benchmark - Ver 1, Rel 6
Standalone XCCDF 1.1.4 - SUSE Linux Enterprise Server 15 STIG - Ver 1, Rel 13
Red Hat Ansible Automation Controller STIG (Y24M04) Red Hat Ansible Automation Controller
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - Red Hat Ansible Automation Controller STIG
Canonical Ubuntu 20.04 LTS STIG (Ver 1, Rel 12) Canonical Ubuntu Linux 18.04 LTS
Defense Information Systems Agency
06/10/2024 SCAP 1.2 Content - Canonical Ubuntu 20.04 LTS STIG Benchmark - Ver 1, Rel 9
Automated Content - SCC 5.9 Ubuntu 18/20 AMD64
Automated Content - SCC 5.9 Ubuntu 20/Raspios-bulleye Aarch64
Standalone XCCDF 1.1.4 - Canonical Ubuntu 20.04 LTS STIG for Ansible - Ver 1, Rel 11
Standalone XCCDF 1.1.4 - Canonical Ubuntu 20.04 LTS STIG - Ver 1, Rel 12
zOS RACF STIG (Version 6, Release 60) IBM OS390
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - IBM zOS STIG
Standalone XCCDF 1.1.4 - z/OS RACF Products - Ver 6, Rel 60
Red Hat Enterprise Linux 9 (Ver 1, Rel 3) Red Hat Enterprise Linux 9.0
Defense Information Systems Agency
06/10/2024 SCAP 1.3 Content - Red Hat Enterprise Linux 9 Benchmark - Ver 1, Rel 1
Standalone XCCDF 1.1.4 - Red Hat Enterprise Linux 9 STIG for Ansible- Ver 1, Rel 2
Standalone XCCDF 1.1.4 - Red Hat Enterprise Linux 9 STIG for Chef- Ver 1, Rel 2
Standalone XCCDF 1.1.4 - Red Hat Enterprise Linux 9 STIG - Ver 1, Rel 3
Samsung Android 14 with Knox 3.x STIG (Y24M04) Google Android 14
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - Samsung Android 14 BYOAD STIG
Standalone XCCDF 1.1.4 - Samsung Android 14 with Knox 3.x STIG
Microsoft Office 365 ProPlus STIG (Ver 2, Rel 12) Microsoft Office 365 ProPlus
Defense Information Systems Agency
06/10/2024 GPOs - Group Policy Objects (GPOs) - April 2024
Standalone XCCDF 1.1.4 - Microsoft Office 365 ProPlus STIG - Ver 2, Rel 12
zOS TSS STIG (Version 6, Release 60) IBM OS390
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - IBM zOS STIG
Standalone XCCDF 1.1.4 - z/OS TSS Products - Ver 6, Rel 60
Standalone XCCDF 1.1.4 - z/OS SRR Scripts - Ver 6, Rel 59
Microsoft Windows 10 STIG (Version 2, Release 9) Microsoft Windows 10
Defense Information Systems Agency
06/10/2024 SCAP 1.2 Content - Microsoft Windows 10 STIG Benchmark - Ver 2, Rel 9
Automated Content - SCC 5.9 Windows
GPOs - Group Policy Objects (GPOs) - April 2024
Standalone XCCDF 1.1.4 - Microsoft Windows 10 STIG - Ver 2, Rel 9
Apple macOS 13 STIG (Ver 1, Rel 4) Apple macOS 13.0 (Ventura)
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - Apple macOS 13 (Ventura) STIG - Ver 1, Rel 4
* This checklist is still undergoing review for inclusion into the NCP.