National Institute of Standards and Technology (NIST)
National Institute of Standards and Technology (NIST) is a US Department of Commerce agency focused on advancing measurement science, standards, and technology for US federal information systems.
- publishes a wide variety of guidance and best practices within the field of information technology including cybersecurity
- What it does
- promotes the development and deployment of systems that are reliable, usable, interoperable, and secure
- advances measurement science through innovations in mathematics, statistics, and computer science
- and conducts research to develop the measurements and standards infrastructure for emerging information technologies and applications in the United States.
- link
Special Publications
A NIST Special Publication provides guidelines for many topics in computing and technology, including risk management.
Common SPs
- NIST SP 800-37
- Guide for Applying the Risk Management Framework to Federal Information Systems
- NIST SP 800-53
- Security and Privacy Controls for Federal Information Systems and Organizations
- NIST SP 800-63
- A US government standard for digital identity guidelines
- including password and access control requirements
- A US government standard for digital identity guidelines
- NIST SP 800-88
- Guidelines for secure media sanitization
- NIST SP 800-61
- Computer Security Incident Handling Guide
- NIST SP 800-34
- Contingency Planning Guide for Information Technology Systems