Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.

Https

The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

NIST Releases National Checklist Program for IT Products – Guidelines for Checklist Users and Developers (NIST SP 800-70 Revision 4)

 NIST releases National Checklist Program for IT Products – Guidelines for Checklist Users and Developers (NIST SP 800-70 Revision 4), a report that explains how to use the National Checklist Program (NCP) to find and retrieve security configuration checklists and describes the policies, procedures, and general requirements for participation in the NCP. A security configuration checklist is a document that contains instructions or procedures for configuring an information technology product to an operational environment, for verifying that the product has been configured properly, and/or for identifying unauthorized changes to the product. Using these checklists can minimize the attack surface, reduce vulnerabilities, lessen the impact of successful attacks, and identify changes that might otherwise go undetected. NIST established the NCP to facilitate development of checklists and to make checklists more organized and usable.

Released February 15, 2018, Updated March 21, 2018