U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Checklist Repository

The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications.

NCP provides metadata and links to checklists of various formats including checklists that conform to the Security Content Automation Protocol (SCAP). SCAP enables validated security products to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.
Please note that the current search fields have been adjusted to reflect NIST SP 800-70 Revision 4.

Search for Checklists using the fields below. The keyword search will search across the name, and summary.

There are 784 matching records. Displaying matches 181 through 200.

Name (Version) Target Authority Last Modified Resources
Apache Benchmark for Unix, Levels I and II (Version 2.1) Apache HTTP Server 1.3
Apache HTTP Server 2.0
Center for Internet Security (CIS)
02/23/2024 Prose - Center for Internet Security Benchmark for Apache Web Server v2.1
CIS Ubuntu Linux 18.04 LTS Benchmark (2.1.0) Canonical Ubuntu Linux 18.04 LTS
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Ubuntu Linux 18.04 LTS Benchmark v2.1.0
CIS Red Hat Enterprise Linux 7 Benchmark (4.0.0) Red Hat Enterprise Linux 7.0
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Red Hat Enterprise Linux 7 Benchmark v4.0.0
CIS Oracle Database 19c Benchmark (1.2.0) Oracle Database 19c
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Oracle Database Server 19c Benchmark v1.2.0
CIS Microsoft Windows Server 2008 R2 Benchmark (3.3.1) Microsoft Windows Server 2008 R2
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft Windows Server 2008 R2 Benchmark v3.3.1
CIS Oracle Solaris 10 Benchmark (5.2.0) Oracle Solaris 10.0
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Oracle Solaris 10 Benchmark, v5.2.0
CIS Oracle MySQL Enterprise Edition 8.0 Benchmark (v1.3.0) Oracle MySQL Enterprise Edition 8.0
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Oracle MySQL Enterprise Edition 8.0 Benchmark v1.3.0
CIS Microsoft Windows Server 2008 (non-R2) Benchmark (3.3.1) Microsoft Windows Server 2008
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft Windows Server 2008 (non-R2) Benchmark v3.3.1
CIS Oracle Cloud Infrastructure Foundations Benchmark (2.0.0) Oracle Cloud Infrastructure
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Oracle Cloud Infrastructure Foundations Benchmark version 2.0.0
CIS NGINX Benchmark (2.0.1) NGINX
Center for Internet Security (CIS)
02/22/2024 Prose - CIS NGINX Benchmark v2.0.1
CIS PostgreSQL 13 Benchmark (1.1.0) PostgreSQL 12
Center for Internet Security (CIS)
02/22/2024 Prose - CIS PostgreSQL 13 Benchmark v1.1.0
CIS Oracle Database 18c Benchmark (1.1.0) Oracle Database 18c
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Oracle Database Server 18c Benchmark v1.1.0
CIS Microsoft Windows Server 2016 RTM (Release 1607) Benchmark (1.3.0) Microsoft Windows Server 2016
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft Windows Server 2016 RTM (Release 1607) Benchmark v1.3.0
CIS Microsoft Windows 8.1 Workstation Benchmark (2.4.1) Microsoft Windows 8.1 (x64)
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft Windows 8.1 Workstation Benchmark v2.4.1
CIS Microsoft Windows Server 2012 (non-R2) Benchmark (3.0.0) Microsoft Windows Server 2012
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft Windows Server 2012 (non-R2) Benchmark v3.0.0
CIS Microsoft Windows Server 2012 R2 Benchmark (3.0.0) Microsoft Windows Server 2012 R2
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft Windows Server 2012 R2 Benchmark v3.0.0
CIS MongoDB 3.6 Benchmark (1.1.0) MongoDB 3.6
Center for Internet Security (CIS)
02/22/2024 Prose - CIS MongoDB 3.6 Benchmark v1.1.0
CIS PostgreSQL 12 Benchmark (1.1.0) PostgreSQL 12
Center for Internet Security (CIS)
02/22/2024 Prose - CIS PostgreSQL 12 Benchmark v1.1.0
CIS Microsoft IIS 8 Benchmark (1.5.1) Microsoft Internet Information Services (IIS) 8.0
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft IIS 8 Benchmark, 1.5.1
CIS Microsoft SQL Server 2017 (1.3.0) Microsoft SQL Server 2017
Center for Internet Security (CIS)
02/22/2024 Prose - CIS Microsoft SQL Server 2017 Benchmark v1.3.0
* This checklist is still undergoing review for inclusion into the NCP.