Checklist Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 561 matching records. Displaying matches 201 through 220.

Name (Version) Target Authority Last Modified Resources
DoD Consensus Security Configuration Checklist for Apple Mac OS 10.5 (Leopard) (1.0) Apple Mac OS X 10.5
Department of Defense
03/12/2020 Prose - Apple Mac OS 10.5 security recommendations
DoD - Microsoft Internet Explorer 9 Settings (31May2011) Microsoft Internet Explorer 9
Department of Defense
03/12/2020 Prose - Microsoft Internet Explorer - Final Draft DoD Internet Explorer 9 Settings
DoD - Microsoft Office 2010 Settings (21April2011) Microsoft Office 2010
Department of Defense
03/12/2020 GPOs - Microsoft Office 2010 Version 1.0 - DRAFT Office 2010 GPO
Prose - Microsoft Office 2010 - DoD Master Office 2010 Settings
Microsoft Windows 2008 Server DNS STIG (Version 1, Release 8) Windows 2008 Server DNS
Defense Information Systems Agency
03/05/2020 Standalone XCCDF 1.1.4 - Sunset - Microsoft Windows 2008 Server DNS STIG - Ver 1, Rel 8
SQL Server 2012 STIG (Version 1, Release 20) Microsoft SQL Server 2012
Defense Information Systems Agency
02/19/2020 Standalone XCCDF 1.1.4 - Sunset - Microsoft SQL Server 2012 STIG - Ver 1, Rel 20
CIS MongoDB 3.6 Benchmark (1.0.0) MongoDB 3.6
Center for Internet Security (CIS)
02/03/2020 Prose - CIS MongoDB 3.6 Benchmark v1.0.0
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.39) IBM z/OS Version 2.1
IBM z/OS Version 2.2
IBM z/OS Version 2.3
Vanguard Integrity Professionals, Inc.
01/30/2020 ZIP - Vanguard z/OS RACF Checklist 6.39(PDF version)
ZIP - Vanguard z/OS RACF Checklist 6.39(XML version)
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.41) IBM Z/OS 2.2
IBM Z/OS 2.3
Vanguard Integrity Professionals, Inc.
01/29/2020 ZIP - Vanguard z/OS RACF Checklist 6.41PDF version)
ZIP - ZIP - Vanguard z/OS RACF Checklist 6.41(XML version)
Vanguard Configuration Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.36) IBM z/OS Version 2, Release 1
IBM z/OS Version 2, Release 2
Vanguard Integrity Professionals, Inc.
01/29/2020 Standalone XCCDF 1.1.4 - Vanguard z/OS RACF Checklist 6.36(XML version)
ZIP - Vanguard z/OS RACF Checklist 6.36(PDF version)
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.37) IBM z/OS Version 2, Release 1
IBM z/OS Version 2, Release 2
Vanguard Integrity Professionals, Inc.
01/29/2020 ZIP - Vanguard z/OS RACF Checklist 6.37(PDF version)
ZIP - Vanguard z/OS RACF Checklist 6.37(XML version)
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.38) IBM z/OS Version 2.1
IBM z/OS Version 2.2
IBM z/OS Version 2.3
Vanguard Integrity Professionals, Inc.
01/29/2020 ZIP - Vanguard z/OS RACF Checklist 6.38(PDF version)
ZIP - Vanguard z/OS RACF Checklist 6.38(XML version)
Vanguard Compliance Manager z/OS RACF Checklist for completing a manual SRR Audit for Stig (6.40) IBM Z/OS 2.2
IBM Z/OS 2.3
IBM z/OS Version 2.1
Vanguard Integrity Professionals, Inc.
01/29/2020 ZIP - Vanguard z/OS RACF Checklist 6.40(PDF version)
ZIP - Vanguard z/OS RACF Checklist 6.40(XML version)
Google Android 10.x STIG (Ver 1, Rel 2) Google Android 10.0
Defense Information Systems Agency
01/21/2020 Standalone XCCDF 1.1.4 - Google Android 10.x STIG - Ver 1, Rel 2
Apple OS X 10.12 STIG (Version 1, Release 6) Apple OS X 10.12
Defense Information Systems Agency
01/17/2020 Standalone XCCDF 1.1.4 - Sunset - Apple OS X 10.12 STIG - Ver 1, Rel 6
BlackBerry OS 10.3.x STIG (Version 1, Release 4) Blackberry OS 10.3
Defense Information Systems Agency
01/17/2020 Standalone XCCDF 1.1.4 - Sunset - BlackBerry OS 10.3x STIG - Ver 1, Rel 4
BlackBerry 10.3 OS STIG (Version 1, Release 4) Blackberry OS 10.0
Defense Information Systems Agency
01/17/2020 Standalone XCCDF 1.1.4 - Sunset - BlackBerry OS 10.3x STIG - Ver 1, Rel 4
Internet Explorer 10 STIG (Version 1 Release 16) Microsoft Internet Explorer 10
Defense Information Systems Agency
01/17/2020 SCAP 1.2 Content - Sunset - Microsoft Internet Explorer 10 STIG Benchmark - Ver 1, Rel 10
Standalone XCCDF 1.1.4 - Sunset - Microsoft Internet Explorer 10 STIG - Ver 1, Rel 16
Microsoft IIS 7.0 STIG (Version 1, Release 19) Microsoft Internet Information Services 7.0
Defense Information Systems Agency
01/17/2020 Standalone XCCDF 1.1.4 - Sunset - Microsoft IIS 7.0 STIG
Windows XP Symantec Virus Scan (Version 1.1) Microsoft Windows XP Pro SP2
Symantec Antivirus
Defense Information Systems Agency
01/16/2020 Standalone XCCDF 1.1.4 - Symantec Antivirus running on Windows XP Pro SP2.
Microsoft Security Compliance Manager - Windows 10 1607 (1.0) Microsoft Windows 10 1607
Microsoft Corporation
01/13/2020 SCAP 1.0 Content - Microsoft Windows 10 1607 BitLocker Security (generated from Microsoft Security Compliance Manager).
SCAP 1.0 Content - Microsoft Windows 10 1607 Computer Security Compliance (generated from Microsoft Security Compliance Manager).
SCAP 1.0 Content - Microsoft Windows 10 1607 Credential Guard Security (generated from Microsoft Security Compliance Manager).
SCAP 1.0 Content - Microsoft Windows 10 1607 Domain Security Compliance (generated from Microsoft Security Compliance Manager).
GPOs - Windows 10 1607 Security Baseline
* This checklist is still undergoing review for inclusion into the NCP.