This bulletin summarizes the information presented in NIST Special Publication (SP) 800-70 Rev. 2, National Checklist Program for IT Products—Guidelines for Checklist Users and Developers: Recommendations of the National Institute of Standards and Technology. The publication was written by Stephen D. Quinn and Murugiah Souppaya of the National Institute of Standards and Technology (NIST), and by Melanie Cook and Karen Scarfone of G2, Inc. It helps both users and developers of security configuration checklists, and includes general information about threats and fundamental technical security practices for operational environments. The bulletin discusses the contents of the publication, including the selection, evaluation, testing and application of checklists to IT products by users. The bulletin also summarizes information for checklist developers about the policies, procedures, and general requirements for participation in the NIST National Checklist Program (NCP). References are provided to sources of information on NIST’s activities to support both checklist users and developers.
This bulletin summarizes the information presented in NIST Special Publication (SP) 800-70 Rev. 2, National Checklist Program for IT Products—Guidelines for Checklist Users and Developers: Recommendations of the National Institute of Standards and Technology. The publication was written by Stephen...
See full abstract
This bulletin summarizes the information presented in NIST Special Publication (SP) 800-70 Rev. 2, National Checklist Program for IT Products—Guidelines for Checklist Users and Developers: Recommendations of the National Institute of Standards and Technology. The publication was written by Stephen D. Quinn and Murugiah Souppaya of the National Institute of Standards and Technology (NIST), and by Melanie Cook and Karen Scarfone of G2, Inc. It helps both users and developers of security configuration checklists, and includes general information about threats and fundamental technical security practices for operational environments. The bulletin discusses the contents of the publication, including the selection, evaluation, testing and application of checklists to IT products by users. The bulletin also summarizes information for checklist developers about the policies, procedures, and general requirements for participation in the NIST National Checklist Program (NCP). References are provided to sources of information on NIST’s activities to support both checklist users and developers.
Hide full abstract
Keywords
checklists; National Checklist Program; cyber security; Federal Information Processing Standards; Federal Information Security Management Act; FISMA; information security; information systems; information technology (IT); National Checklist Program; National Checklist Repository; NIST Special Publications; product vendors; risk management; security configurations; security controls; security plans; security policy; security requirements; security risks; threats; vulnerabilities