U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Checklist Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 787 matching records. Displaying matches 221 through 240.

Name (Version) Target Authority Last Modified Resources
CIS Microsoft Windows Server 2016 RTM (Release 1607) Benchmark (1.3.0) Microsoft Windows Server 2016
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft Windows Server 2016 RTM (Release 1607) Benchmark v1.3.0
CIS Microsoft Windows 8.1 Workstation Benchmark (2.4.1) Microsoft Windows 8.1 (x64)
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft Windows 8.1 Workstation Benchmark v2.4.1
CIS Microsoft Windows Server 2012 (non-R2) Benchmark (3.0.0) Microsoft Windows Server 2012
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft Windows Server 2012 (non-R2) Benchmark v3.0.0
CIS Microsoft Windows Server 2012 R2 Benchmark (3.0.0) Microsoft Windows Server 2012 R2
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft Windows Server 2012 R2 Benchmark v3.0.0
CIS MongoDB 3.6 Benchmark (1.1.0) MongoDB 3.6
Center for Internet Security (CIS)
02/22/2024 Prose - CIS MongoDB 3.6 Benchmark v1.1.0
CIS PostgreSQL 12 Benchmark (1.1.0) PostgreSQL 12
Center for Internet Security (CIS)
02/22/2024 Prose - CIS PostgreSQL 12 Benchmark v1.1.0
CIS Microsoft IIS 8 Benchmark (1.5.1) Microsoft Internet Information Services (IIS) 8.0
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft IIS 8 Benchmark, 1.5.1
CIS Microsoft SQL Server 2017 (1.3.0) Microsoft SQL Server 2017
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft SQL Server 2017 Benchmark v1.3.0
CIS Cisco IOS 15 Benchmark (4.1.1) Cisco IOS 15
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Cisco IOS 15 Benchmark v4.1.1
CIS Microsoft IIS 10 Benchmark (1.2.1) Microsoft IIS 10
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft IIS 10 Benchmark v1.2.1
CIS Google Chrome Benchmark (3.0.0) Google Chrome 46
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Google Chrome Benchmark, 3.0.0
CIS Microsoft SQL Server 2016 Benchmark (1.4.0) Microsoft SQL Server 2016
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft SQL Server 2016 Benchmark v1.4.0
CIS Juniper OS Benchmark (2.1.0) Juniper JunOS
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Juniper OS Benchmark v2.1.0
CIS Debian Linux 8 Benchmark (2.0.2) Debian Linux 8.0
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Debian Linux 8 Benchmark
CIS Google Cloud Platform Foundation Benchmark (2.0.0) Google Cloud Computing Platform
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Google Cloud Platform Foundation Benchmark v2.0.0
CIS Google Android Benchmark (1.5.0) Google Android 8.0
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Google Android Benchmark v1.5.0
CIS Debian Linux 9 Benchmark (1.0.1) Debian Linux 9.0
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Debian Linux 9 Benchmark v1.0.1
CIS IBM AIX 7.1 Benchmark (2.1.0) IBM AIX 7.1
Center for Internet Security (CIS)
02/22/2024 Prose - CIS IBM AIX 7.1 Benchmark v2.1.0
CIS Microsoft Windows 10 Enterprise Release 1809 Benchmark (1.6.1) Microsoft Windows 10
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft Windows 10 Enterprise Release 1809 Benchmark v1.6.1
CIS CentOS Linux 6 Benchmark (3.0.0) CentOS Linux 6
Center for Internet Security (CIS)
02/22/2024 Prose - CIS CentOS Linux 6 Benchmark v3.0.0
* This checklist is still undergoing review for inclusion into the NCP.