National Institute of Standards and Technology (NIST)


National Institute of Standards and Technology (NIST) is a US Department of Commerce agency focused on advancing measurement science, standards, and technology for US federal information systems.

  • publishes a wide variety of guidance and best practices within the field of information technology including cybersecurity
  • What it does
    • promotes the development and deployment of systems that are reliable, usable, interoperable, and secure
    • advances measurement science through innovations in mathematics, statistics, and computer science
    • and conducts research to develop the measurements and standards infrastructure for emerging information technologies and applications in the United States.
  • link 

Special Publications

A NIST Special Publication provides guidelines for many topics in computing and technology, including risk management.

Common SPs

  • NIST SP 800-37
    • Guide for Applying the Risk Management Framework to Federal Information Systems
  • NIST SP 800-53
    • Security and Privacy Controls for Federal Information Systems and Organizations
  • NIST SP 800-63
    • A US government standard for digital identity guidelines
      • including password and access control requirements
  • NIST SP 800-88
    • Guidelines for secure media sanitization
  • NIST SP 800-61
    • Computer Security Incident Handling Guide
  • NIST SP 800-34
    • Contingency Planning Guide for Information Technology Systems