Checklist Repository
The National Checklist Program (NCP), defined by the NISTSP 800-70, is the U.S. government repository of publicly availablesecurity checklists (or benchmarks) that provide detailed low levelguidance on setting the security configuration of operating systemsand applications.
NCP provides metadata and links to checklists of various formatsincluding checklists that conform to the SecurityContent Automation Protocol (SCAP). SCAP enables validatedsecurity products to automatically perform configuration checkingusing NCP checklists. For more information relating to the NCP pleasevisit the information page orthe glossary of terms.
Please note that the current search fields have been adjusted toreflect NIST SP 800-70 Revision4.
Search for Checklists using the fields below. The keywordsearch will search across the name, and summary.
There are 783matching records. Displaying matches 1 through 20.
| Name (Version) | Target | Authority | Last Modified | Resources |
|---|---|---|---|---|
| Amazon Elastic Kubernetes Service (EKS) (1.4.0) | Amazon Elastic Kubernetes Service (EKS) (1.4.0) | Center for Internet Security (CIS) | 03/24/2024 | Prose - Amazon Elastic Kubernetes Service (EKS), 1.4.0 |
| Alibaba Cloud Linux 3 (1.0.0) | Alibaba Cloud Linux 3 | Center for Internet Security (CIS) | 03/24/2024 | Prose - Alibaba Cloud Linux 3, v1.0.0 |
| AlmaLinux OS 8 (3.0.0) | AlmaLinux OS 8 | Center for Internet Security (CIS) | 03/24/2024 | Prose - AlmaLinux OS 8, 3.0.0 |
| AlmaLinux OS 9 (1.0.0) | AlmaLinux OS 9 | Center for Internet Security (CIS) | 03/24/2024 | Prose - AlmaLinux OS 9, 1.0.0 |
| Samsung Android 14 with Knox 3.x STIG (Y23M11) | Google Android 14 | Defense Information Systems Agency | 03/22/2024 | Standalone XCCDF 1.1.4 - Samsung Android 14 BYOAD STIG Standalone XCCDF 1.1.4 - Samsung Android 14 with Knox 3.x STIG |
| Alibaba Cloud Container Service For Kubernetes (1.0.0) | Alibaba Cloud Container Service for Kubernetes | Center for Internet Security (CIS) | 03/22/2024 | Prose - Alibaba Cloud Container Service For Kubernetes, 1.0.0 |
| CIS Amazon Linux Benchmark (2.1.0) | Amazon Linux | Center for Internet Security (CIS) | 03/22/2024 | Prose - CIS Amazon Linux Benchmark, 2.1.0 |
| CIS Apache Tomcat 10 Benchmark (1.1.0) | Apache Tomcat 10.0 | Center for Internet Security (CIS) | 03/22/2024 | Prose - Apache Tomcat 10.0 |
| Red Hat Enterprise Linux 9 (Ver 1, Rel 2) | Red Hat Enterprise Linux 9.0 | Defense Information Systems Agency | 03/22/2024 | SCAP 1.3 Content - Red Hat Enterprise Linux 9 Benchmark - Ver 1, Rel 1 Standalone XCCDF 1.1.4 - Red Hat Enterprise Linux 9 STIG - Ver 1, Rel 2 Standalone XCCDF 1.1.4 - Red Hat Enterprise Linux 9 STIG for Ansible- Ver 1, Rel 2 Standalone XCCDF 1.1.4 - Red Hat Enterprise Linux 9 STIG for Chef- Ver 1, Rel 2 |
| CIS Amazon Web Services Foundations Benchmark (v1.3.0) | Amazon Web Services | Center for Internet Security (CIS) | 03/22/2024 | Prose - CIS Amazon Web Services Foundations Benchmark version 3.0.0 |
| CIS Microsoft Azure Compute Services Benchmark (1.0.0) | Microsoft Azure | Center for Internet Security (CIS) | 03/22/2024 | Prose - CIS Microsoft Azure Compute Services Benchmark v1.0.0 |
| CIS IBM Cloud Foundations Benchmark (1.1.0) | IBM Cloud CLI | Center for Internet Security (CIS) | 03/22/2024 | Prose - CIS IBM Cloud Foundations Benchmark v1.1.0 |
| CIS Google Container-Optimized OS Benchmark (1.1.0) | Google Android | Center for Internet Security (CIS) | 03/22/2024 | Prose - CIS Google Container-Optimized OS Benchmark v1.1.0 |
| CIS Amazon Web Services Foundations Benchmark (3.0.0) | Amazon Web Services | Center for Internet Security (CIS) | 03/22/2024 | Prose - CIS Amazon Web Services Foundations Benchmark v3.0.0 |
| CIS Microsoft Azure Foundations Benchmark (2.1.0) | Microsoft Azure | Center for Internet Security (CIS) | 03/22/2024 | Prose - CIS Microsoft Azure Foundations Benchmark v2.1.0 |
| CIS IBM WebSphere Liberty Benchmark (1.0.0) | IBM WebSphere Liberty | Center for Internet Security (CIS) | 03/22/2024 | Prose - CIS IBM WebSphere Liberty Benchmark v1.0.0 |
| CIS AWS Compute Services Benchmark (1.0.0) | Amazon Web Services | Center for Internet Security (CIS) | 03/22/2024 | Prose - CIS AWS Compute Services Benchmark v1.0.0 |
| CIS AWS End User Compute Services Benchmark (1.1.0) | Amazon Web Services | Center for Internet Security (CIS) | 03/22/2024 | Prose - CIS AWS End User Compute Services Benchmark v1.1.0 |
| Azure Active Directory - SCuBA (1.0) | Microsoft Azure Active Directory | Cybersecurity and Infrastructure Security Agency (CISA) | 03/18/2024 | Machine-Readable Format - Microsoft Azure Active Directory - GitHub Prose - Azure Active Directory - SCuBA |
| Google Android 14 BYOAD STIG (Y24M03) | Google Android 14 | Defense Information Systems Agency | 03/14/2024 | Standalone XCCDF 1.1.4 - Google Android 14 BYOAD STIG |
* This checklist is still undergoing review forinclusion into the NCP.
