Overview

The National Institute of Standards and Technology (NIST) is a non-regulatory U.S. federal agency that develops and promotes measurement standards and technology. NIST's mission is to improve the quality of life, enhance productivity, and facilitate trade. NIST's work is essential for ensuring the security and privacy of information systems and data, particularly in the context of federal agencies and critical infrastructure.

NIST 800-53 is a set of security and privacy controls for federal information systems and organizations. It provides a comprehensive framework for managing risk and ensuring the confidentiality, integrity, and availability of information. NIST 800-53 is widely used by federal agencies, contractors, and other organizations that handle sensitive information.

What does NIST do?

Conducts research NIST laboratories conduct research to advance the U.S. technological infrastructure

Provides guidance NIST provides security, privacy, and compliance guidance to federal agencies and private industry

Develops standards NIST develops measurement standards and technology to support innovation and industrial competitiveness

Helps businesses improve NIST programs help businesses and organizations improve their performance and quality of operations

What are some examples of NIST's work?

NIST Cyber Security Framework 2.0

NIST CSF 2.0

System Development Life Cycle

NIST SDLC

Risk Management Life Cycle

NIST SP 800-37

Guide for Mapping Types of Information and Systems to Security Categories

NIST SP 800-60

Managing Information Security Risk: Organization, Mission, and Information System View

NIST SP 800-39

Security and Privacy Controls for Information Systems and Organizations

NIST SP 800-53

Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations

NIST SP 800-171 Rev.3

Zero Trust Architecture

NIST SP 800-207

Incident Response

NIST SP 800-61 Rev.2

Cyber Threat Intelligence

NIST SP 800-150

NIST Privacy Framework

NIST Privacy Framework