Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST's Security Configuration Checklists Program for Technology Products



Shirley M. Radack


This bulletin describes the NIST security configuration checklists program and is based on NIST Special Publication 800-70: Security Configuration Checklists Program for IT Products, by Murugiah Souppaya, John Wack and Karen Kent. The bulletin discusses checklists and their benefits, and explains how the program operate. It describes the policies, procedures, and general requirements for participation in the program, and explains how to retrieve checklists from NIST's repository.
ITL Bulletin -


checklists, information technology security, operational environments, security controls, security settings, security templates


Radack, S. (2005), NIST's Security Configuration Checklists Program for Technology Products, ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD, [online], (Accessed June 13, 2024)


If you have any questions about this publication or are having problems accessing it, please contact

Created June 1, 2005, Updated February 19, 2017