Skip to content
Home / Authority / Agency / NIST

NIST

National Institute of Standards and Technology (USA)

The National Institute of Standards and Technology (NIST) is a non-regulatory agency within the U.S. Department of Commerce, renowned for its pivotal role in developing cybersecurity standards, guidelines, and best practices that serve U.S. industry, federal agencies, and the broader public. NIST’s cybersecurity initiatives include the creation of the NIST Cybersecurity Framework (CSF), which provides structured, voluntary guidance for organizations to manage and reduce cybersecurity risks, and is widely adopted across both public and private sectors. NIST’s work is driven by federal mandates, industry needs, and emerging technological challenges, and its resources are designed to be practical and forward-looking, addressing immediate security needs while anticipating future risks. By setting benchmarks for cybersecurity, NIST fosters innovation, enhances risk management, and helps organizations-especially those handling sensitive government information-strengthen their defenses against evolving cyber threats.

NIST SP 800-221 Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio

NIST SP 800-221 serves as the critical functional bridge between enterprise-level strategy and technical delivery, focusing on the Enterprise Impact of Information and Communications Technology (ICT) Risk. It moves beyond… Read More »NIST SP 800-221 Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio

NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations

NIST SP 800-161 Rev. 1, titled “Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations,” offers comprehensive guidance for organizations to identify, assess, and mitigate cybersecurity risks across their… Read More »NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations

NIST SP 1800-26 Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events

NIST Special Publication 1800-26, titled “Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events,” provides a practical, standards-based reference guide to help organizations maintain the integrity and availability… Read More »NIST SP 1800-26 Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events

NIST SP 1800-11 Data Integrity: Recovering from Ransomware and Other Destructive Events

NIST Special Publication 1800-11, titled “Data Integrity: Recovering from Ransomware and Other Destructive Events,” is a cybersecurity practice guide that demonstrates how organizations can develop and implement strategies to quickly… Read More »NIST SP 1800-11 Data Integrity: Recovering from Ransomware and Other Destructive Events

NIST SP 800-53 Rev. 5 Security and Privacy Controls for Information Systems and Organizations

NIST Special Publication 800-53 (NIST SP 800-53) provides a comprehensive catalog of security and privacy controls designed to protect federal information systems and organizations from a wide range of risks. The… Read More »NIST SP 800-53 Rev. 5 Security and Privacy Controls for Information Systems and Organizations

NIST SP 1800-25 Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events

NIST SP 1800-25, titled “Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events,” provides practical guidance for organizations to identify, protect, and manage their critical assets against… Read More »NIST SP 1800-25 Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events

NIST Federal Information Processing Standard (FIPS) Publication 140-3: Security Requirements for Cryptographic Modules

FIPS 140-3 is a mandatory standard for federal agencies and a benchmark for the private sector that defines the security requirements for hardware and software cryptographic modules. It superseded FIPS… Read More »NIST Federal Information Processing Standard (FIPS) Publication 140-3: Security Requirements for Cryptographic Modules