BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

1.3 Relevance to NIST SP 800-70 and the National Checklist Program

NIST platform security: roots of trust, firmware and secure enclaves SP 800-219
All changes in this version
first version loaded 1 Introduction part of 1

Title

Relevance to NIST SP 800-70 and the National Checklist Program

Control

The security baselines from the mSCP GitHub page are included in the National Checklist Program. As NIST SP 800-70, Revision 4 [4] explains, federal agencies are required to use appropriate security configuration checklists from the National Checklist Program when available. Part 39 of the Federal Acquisition Regulations, Section 39.101 paragraph (c) states,

In acquiring information technology, agencies shall include the appropriate information technology security policies and requirements, including use of common security configurations available from the National Institute of Standards and Technology’s website at https://checklists.nist.gov . Agency contracting officers should consult with the requiring official to ensure the appropriate standards are incorporated.