SP-800 70 Rev2 is associated with which program?

• A. National Checklist Program
• B. Risk Management Framework
• C. Information Security Program
• D. Incident Response Program

Answer: (A)

SP 800-70 Rev. 2 defines the National Checklist Program, which provides standardized security checklists that federal agencies use to evaluate and validate security controls. This publication describes how these checklists are created, approved, maintained, and shared, and how they map to established security controls so assessments can be consistent across agencies. Because its purpose is specifically to manage and streamline the use of uniform checklists for information security evaluations, it is distinct from the Risk Management Framework (which is about the overall risk process), from a general Information Security Program, or from an Incident Response Program.