The National Institute of Standards and Technology (NIST)

NIST creates measurement standards, research frameworks, and technical guidance used across U.S. industries. In cybersecurity, it’s best known for publishing widely adopted resources like the NIST Cybersecurity Framework and SP 800-53.

NIST provides a structured methodology to assess, manage, and improve cybersecurity risk. Its frameworks are used globally by both public and private organizations to establish consistent, defensible security practices.

NIST doesn’t issue certifications itself, but its standards are used in programs like FedRAMP and FISMA. Independent audits and compliance programs use NIST guidelines to certify that a system meets federal security controls.