Checklist Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 558 matching records. Displaying matches 81 through 100.

Name (Version) Target Authority Last Modified Resources
Cisco ISE STIG (Version 1, Release 1) Cisco Identity Services Engine
Defense Information Systems Agency
06/04/2021 Standalone XCCDF 1.1.4 - Cisco ISE STIG
Apple OS/iPad OS 14 STIG (Ver 1, Rel 2) Apple iPad OS/iOS 14.0
Defense Information Systems Agency
05/28/2021 Standalone XCCDF 1.1.4 - Apple OS/iPad OS 14 STIG - Ver 1, Rel 2
Adobe Acrobat Reader DC Classic Track (Version 2, Release 1) Adobe Acrobat Reader
Defense Information Systems Agency
05/27/2021 SCAP 1.2 Content - Adobe Acrobat Reader DC Classic Track STIG Benchmark - Ver 2, Rel 1
Automated Content - SCC 5.4.1 Windows
Standalone XCCDF 1.1.4 - Sunset - Adobe Acrobat Reader DC Classic Track STIG - Ver 2, Rel 1
Canonical Ubuntu 20.04 LTS STIG (Ver 1, Rel 1) Oracle MySQL Enterprise Edition 8.0
Defense Information Systems Agency
05/12/2021 Standalone XCCDF 1.1.4 - Canonical Ubuntu 20.04 LTS STIG - Ver 1, Rel 1
CIS Microsoft SQL Server 2016 Benchmark (1.3.0) Microsoft SQL Server 2016
Center for Internet Security (CIS)
05/04/2021 Prose - CIS Microsoft SQL Server 2016 Benchmark v1.3.0
CIS Microsoft SQL Server 2017 (1.2.0) Microsoft SQL Server 2017
Center for Internet Security (CIS)
05/04/2021 Prose - CIS Microsoft SQL Server 2017 Benchmark v1.2.0
CIS Microsoft SQL Server 2019 (1.2.0) Microsoft SQL Server 2019
Center for Internet Security (CIS)
05/04/2021 Prose - CIS Microsoft SQL Server 2019 Benchmark v1.2.0
Oracle MySQL 8.0 STIG (Ver 1, Rel 1) Oracle MySQL 8.0
Defense Information Systems Agency
05/04/2021 Standalone XCCDF 1.1.4 - Oracle MySQL 8.0 STIG, Ver 1, Rel 1
Citrix Virtual Apps and Desktops (VAD) 7.x STIG (Version 1, Release 1) Citrix StoreFront
Defense Information Systems Agency
05/04/2021 Standalone XCCDF 1.1.4 - Citrix Virtual Apps and Desktops (VAD) 7.x STIG
Apple OS X 10.13 STIG (Ver 2, Rel 3) Apple macOS 10.13
Defense Information Systems Agency
04/29/2021 Standalone XCCDF 1.1.4 - Apple OS X 10.13 STIG - Ver 2, Rel 3
Crunchy Data PostgreSQL STIG (Ver 1, Rel 1) CrunchyData PostgreSQL
Defense Information Systems Agency
04/28/2021 Standalone XCCDF 1.1.4 - Crunchy Data PostgreSQL STIG - Ver 1, Rel 1
Oracle 11.2g Database STIG (Version 2, Release 1) Oracle Database 11g 11.2
Defense Information Systems Agency
04/28/2021 Standalone XCCDF 1.1.4 - Oracle 11.2g Database STIG - Ver 2, Rel 1
Juniper SRX Services Gateway (SG) STIG (Ver 2, Rel 1) Juniper SRX Services Gateway (SG)
Defense Information Systems Agency
04/28/2021 Standalone XCCDF 1.1.4 - Juniper SRX SG STIG for Ansible - Ver 1, Rel 1
Standalone XCCDF 1.1.4 - Juniper SRX SG STIG
A10 Networks Application Delivery Controller (ADC) (Version 2, Release 1) A10 Networks Application Delivery Controller
Defense Information Systems Agency
04/28/2021 Standalone XCCDF 1.1.4 - A10 Networks ADC ALG - Ver 2, Rel 1
Standalone XCCDF 1.1.4 - A10 Networks Application Delivery Controller (ADC) NDM STIG Ver 1
Docker Enterprise 2.x Linux/UNIX STIG (Ver 2 Rel 1) Docker Enterprise 2.0.0
Defense Information Systems Agency
04/28/2021 Machine-Readable Format - Docker Enterprise 2.x Linux/Unix STIG for Ansible - Ver 1, Rel 1
Standalone XCCDF 1.1.4 - Docker Enterprise 2.x Linux/Unix - Ver 2, Rel 1
Motorola Android 9.x STIG (Ver 1, Rel 1) Google Android 9.x
Defense Information Systems Agency
04/28/2021 Standalone XCCDF 1.1.4 - Motorola Android 9 STIG
Oracle WebLogic Server 12c STIG (Ver 2, Rel 1) Oracle Weblogic Server
Defense Information Systems Agency
04/28/2021 Standalone XCCDF 1.1.4 - Oracle WebLogic Server 12c - Ver 2, Rel 1
Oracle 12c Database STIG (Ver 2, Rel 1) Oracle Database 12c
Defense Information Systems Agency
04/28/2021 Standalone XCCDF 1.1.4 - Oracle Database 12c STIG - Ver 2, Rel 1
Azure Security Benchmark (1.0) Microsoft Azure
Microsoft Corporation
04/22/2021 Prose - Azure Security Benchmark
CIS PostgreSQL 13 Benchmark (1.0.0) PostgreSQL 12
Center for Internet Security (CIS)
03/29/2021 Prose - CIS PostgreSQL 13 Benchmark v1.0.0
* This checklist is still undergoing review for inclusion into the NCP.