When the subject is cybersecurity compliance, the National Institute of Standards and Technology (NIST) is often the first reference that comes to mind. NIST has …
What is NIST Compliance?
The National Institute of Standards and Technology (NIST) is a physical sciences laboratory and a non-regulatory federal agency of the U.S. Department of Commerce. It was created to help the United States better compete with economic rivals.
NIST plays a role in developing standards for a variety of products and services, such as nano-devices, disaster-resistant buildings, cybersecurity frameworks, and global networking.
One of the most widely known branches of NIST is the Computer Security Resource Center (CSRC), which provides resources for information security, cybersecurity, and information privacy.
Cybersecurity professionals are most familiar with NIST special publications (NIST SPs), which address standards for cybersecurity programs. The most common NIST publications for professional security consumption are the NIST Cybersecurity Framework (CSF), the Federal Information Processing Standards (FIPS), and NIST Special Publications such as NIST 800-171 and 800-53.
The main role of NIST today is to influence and guide cybersecurity frameworks in the U.S. federal government.