Which organization developed the National Checklist Program (NCP) for IT products?

• A. National Institute of Standards and Technology (NIST)
• B. National Security Agency (NSA)
• C. Federal Communications Commission (FCC)
• D. Department of Homeland Security (DHS)

Answer: (A)

The National Checklist Program was developed by the National Institute of Standards and Technology to centralize and maintain security configuration checklists for IT products. This program creates and stores standardized checklists that federal agencies use when evaluating and configuring systems, ensuring consistent, repeatable security baselines across products and assessments. While agencies like NSA, FCC, and DHS play important roles in security, policy, and protective actions, the responsibility for establishing and managing the checklist program itself lies with NIST, whose mandate is to develop standards and guidelines for secure information technology.