Which NIST Special Publication covers Security Configuration Checklists?

• A. NIST SP 800-35
• B. NIST SP 800-36
• C. NIST SP 800-64
• D. NIST SP 800-70

Answer: (D)

Security configuration checklists provide the concrete, repeatable settings that teams apply to operating systems, networks, and applications to maintain secure baselines. NIST SP 800-70 is the publication that standardizes these checklists for federal information systems, offering a library of recommended configurations and guidance on applying them across common platforms. This makes it the primary resource for creating and verifying secure configurations, which is exactly what the checklists are designed to support.

Other NIST publications cover different security topics, such as certification and accreditation processes or guidance for integrating security into the system development life cycle and risk management. They do not provide the standard security configuration checklists themselves.