National Institute of Standards and Technology, National Checklist Program for IT Products—Guidelines for Checklist Users and Developers (NIST Special Publication 800-70, Rev. 3) (Dec. 11, 2015) (full-text).
This publication describes security configuration checklists and their benefits, and it explains how to use the NIST National Checklist Program (NCP) to find and retrieve checklists. The publication also describes the policies, procedures, and general requirements for participation in the NCP. Revision 3 updates the previous version of the document, which was released in 2011, by streamlining the text and removing outdated content, as well as updating the requirements for United States Government Configuration Baselines (USGCB).