This document describes the use, benefits, and management of checklists, and explains how to use the NIST National Checklist Program (NCP) to find and retrieve checklists. The document also describes the policies, procedures, and general requirements for participation in the NCP.
1.2 Document Organization
Section 2 contains an overview of checklists and describes the advantages of the NIST NCP and how it works.
Section 3 provides additional details on pre-defined checklist operational environments that are used in the NCP to help developers create checklists that are consistent with security practices. The material presented in Section 3 can also help checklist users select the checklists that best match their own operational environments.
Section 4 contains information for potential checklist users. It describes how to use the NCP to find and retrieve checklists that best match the identified needs. It also contains guidance on how to implement checklists, including how to analyze the specific operating environment and then tailor checklists as applicable.
Section 5 provides guidance for current and prospective checklist developers. This guidance contains information on the procedures for preparing and submitting a checklist to NIST for inclusion in the checklist repository.
Appendix A lists references for this document.
Appendix B contains the programmatic and legal requirements that must be satisfied to participate in the NCP.
Appendix C contains the NCP participation and logo usage agreement form.
Appendix D details additional requirements that United States Government Configuration Baseline (USGCB) checklists must meet.
Appendix E contains a list of acronyms used in this document.
Appendix F presents a glossary of the terms used in this document.
Appendix G provides the change log for the most recent release of the document.
