U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Checklist Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 789 matching records. Displaying matches 41 through 60.

Name (Version) Target Authority Last Modified Resources
Canonical Ubuntu 18.04 LTS STIG (Ver 2, Rel 14) Canonical Ubuntu Linux 18.04 LTS
Defense Information Systems Agency
06/10/2024 SCAP 1.2 Content - Canonical Ubuntu 18.04 LTS STIG Benchmark - Ver 2, Rel 11
Automated Content - SCC 5.9 Ubuntu 18/20 AMD64
Automated Content - SCC 5.9 Ubuntu 20/Raspios-bulleye Aarch64
Standalone XCCDF 1.1.4 - Canonical Ubuntu 18.04 LTS STIG - Ver 2, Rel 14
NetApp ONTAP DSC 9.X STIG (Ver 1, Rel 4) NetApp ONTAP DSC 9.x
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - NetApp ONTAP DSC 9.x STIG - Ver 1, Rel 4
Microsoft Windows 11 STIG (Ver 1, Rel 6) Microsoft Windows 11
Defense Information Systems Agency
06/10/2024 SCAP 1.2 Content - Microsoft Windows 11 STIG Benchmark - Ver 1, Rel 3
Standalone XCCDF 1.1.4 - Microsoft Windows 11 STIG for Chef - Ver 1, Rel 3
Standalone XCCDF 1.1.4 - Microsoft Windows 11 STIG - Ver 1, Rel 6
Microsoft Windows Server 2016 STIG (Version 2, Release 8) Microsoft Windows Server 2016
Defense Information Systems Agency
06/10/2024 SCAP 1.2 Content - Microsoft Windows Server 2016 STIG Benchmark - Ver 2, Rel 5
Automated Content - SCC 5.9 Windows
GPOs - Group Policy Objects (GPOs) - April 2024
Machine-Readable Format - Microsoft Windows Server 2016 STIG for Chef - Ver 1, Rel 3
Machine-Readable Format - Microsoft Windows Server 2016 STIG for PowerShell DSC - Ver 1, Rel 3
Standalone XCCDF 1.1.4 - Microsoft Windows Server 2016 STIG - Ver 2, Rel 8
Microsoft Windows Server 2022 (Ver 1, Rel 5) Microsoft Windows Server 2022
Defense Information Systems Agency
06/10/2024 SCAP 1.2 Content - Microsoft Windows Server 2022 STIG Benchmark - Ver 1, Rel 3
Standalone XCCDF 1.1.4 - Microsoft Windows Server 2022 STIG for Chef - Ver 1, Rel 1
Standalone XCCDF 1.1.4 - Microsoft Windows Server 2022 STIG - Ver 1, Rel 5
zOS ACF2 STIG (Version 6, Release 60) IBM OS390
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - IBM zOS STIG
Standalone XCCDF 1.1.4 - z/OS ACF2 Products - Ver 6, Rel 60
Standalone XCCDF 1.1.4 - z/OS SRR Scripts - Ver 6, Rel 59
Microsoft Windows 2012 Server DNS STIG (Ver 2, Rel 6) Microsoft Windows Server 2012 R2
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - Microsoft Windows 2012 Server Domain Name System STIG - Ver 2, Rel 6
BIND 9.x STIG (Ver 2, Rel 3) BIND 9.x
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - BIND 9.x STIG - Ver 2, Rel 3
Solaris 11 (SPARC and x86) Manual STIG (Version 2, Release 10) Sun Solaris
Defense Information Systems Agency
06/10/2024 SCAP 1.2 Content - Solaris 11 SPARC STIG Benchmark - Ver 2, Rel 4
SCAP 1.2 Content - Solaris 11 X86 STIG Benchmark - Ver 2, Rel 4
Automated Content - SCC 5.9 Solaris 11 i386
Automated Content - SCC 5.9 Solaris 11 SPARC
Standalone XCCDF 1.1.4 - Palo Alto Networks STIG for Ansible - Ver 1, Rel 4
Standalone XCCDF 1.1.4 - Solaris 11 SPARC STIG - Ver 2, Rel 10
Standalone XCCDF 1.1.4 - Solaris 11 X86 STIG - Ver 2, Rel 10
Apple macOS (Sonoma) 14 STIG (Ver 1, Rel 2) Apple macOS 14.0
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - Apple macOS 14 (Sonoma) STIG - Ver 1, Rel 2
Red Hat Jboss Enterprise Application Platform (EAP) 6.3 STIG (Ver 2, Rel 4) Red Hat JBoss Enterprise Application Platform 6.3.0
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - Red Hat JBoss Enterprise Application Platform (EAP) 6.3 STIG - Ver 2, Rel 4
Oracle Linux 8 STIG (Ver 1, Rel 10) Oracle Linux 8.0
Defense Information Systems Agency
06/10/2024 SCAP 1.2 Content - Oracle Linux 8 STIG Benchmark - Ver 1, Rel 8
Standalone XCCDF 1.1.4 - Oracle Linux 8 STIG - Ver 1, Rel 10
Standalone XCCDF 1.1.4 - Oracle Linux 8 STIG for Ansible - Ver 1, Rel 9
Cisco IOS Switch STIG (Y24M04) Cisco IOS
Cisco IOS XE
Cisco NX-OS
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - Cisco IOS XE Switch STIG
Standalone XCCDF 1.1.4 - Cisco IOS Switch STIG
Standalone XCCDF 1.1.4 - Cisco NX OS Switch STIG
Microsoft SQL Server 2016 STIG (Y24M04) Microsoft SQL Server 2016
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - MS SQL Server 2016 STIG
Microsoft .NET Framework 4 (Version 2, Release 4) Microsoft .NET Framework 4.0
Defense Information Systems Agency
06/10/2024 SCAP 1.2 Content - Microsoft .NET Framework 4 STIG Benchmark - Ver 2, Rel 2
Automated Content - SCC 5.9 Windows
Standalone XCCDF 1.1.4 - Microsoft .Net Framework 4.0 STIG - Ver 2, Rel 4
Microsoft Edge STIG (Ver 1, Rel 8) Microsoft Edge
Defense Information Systems Agency
06/10/2024 SCAP 1.2 Content - Microsoft Edge STIG Benchmark - Ver 1, Rel 3
GPOs - Group Policy Objects (GPOs) - April 2024
Standalone XCCDF 1.1.4 - Microsoft Edge STIG - Ver 1, Rel 8
Apache Server 2.4 UNIX STIG (Y24M04) Apache HTTP Server 2.4.0
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - Apache Server 2.4 Unix STIG
Microsoft Windows Server 2019 (Ver 2, Rel 9) Microsoft Windows Server 2019
Defense Information Systems Agency
06/10/2024 SCAP 1.2 Content - Microsoft Windows Server 2019 STIG Benchmark - Ver 2, Rel 5
Automated Content - SCC 5.9 Windows
GPOs - Group Policy Objects (GPOs) - April 2024
Machine-Readable Format - Microsoft Windows Server 2019 STIG for Chef - Ver 1, Rel 2
Standalone XCCDF 1.1.4 - Microsoft Windows Server 2019 STIG - Ver 2, Rel 9
Apple OS/iPad OS 15 STIG (Ver 1, Rel 4) Apple OS/iPad OS 15
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - Apple iOS/iPadOS 15 STIG - Ver 1, Rel 4
Active Directory Domain STIG (Ver 3, Rel 4) Microsoft Active Directory
Defense Information Systems Agency
06/10/2024 Standalone XCCDF 1.1.4 - Active Directory Domain STIG - Ver 3, Rel 4
* This checklist is still undergoing review for inclusion into the NCP.