📏National Institute of Standards and Technology (NIST)

NEW

U.S. federal agency advancing measurement science, standards, and technology to enhance innovation and industrial competitiveness.

DESCRIPTION

NIST develops widely adopted standards and frameworks across cryptography, cybersecurity, and AI. Its publications (FIPS and SP series) guide compliance and risk management in government and industry. NIST’s Cybersecurity Framework and SP 800-53 inform control baselines. The AI Risk Management Framework supports trustworthy AI practices. NIST also operates labs and the National Vulnerability Database. Its guidance often complements international standards like ISO.

ALTERNATIVE DEFINITIONS

NIST

NIST promotes U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life.

Highlights mission and public benefit through standards and measurement science.

Source

NIST

Founded in 1901, NIST is one of the nation’s oldest physical science laboratories.

Emphasizes NIST’s scientific foundation and longstanding role.

Source

RELATED TERMS

NIST SP 800-53 NIST CSF FIPS 140-3 Rijndael SHA-256 AI Risk Management Framework NVD Cybersecurity Framework Measurement Science

COMPETING TERMS

ISO

RELATIONS

• Broader: NIST

KNOWLEDGE AREAS

Data Security Data Privacy & Compliance AI Governance Data Management Infrastructure

TARGET AUDIENCE

Chief Information Security Officer Security Architect IT Auditor Data Privacy Officer Chief Technology Officer Data Governance Manager Cloud Architect

EXTERNAL SOURCES

• Wikipedia - National Institute of Standards and Technology
• NIST - Cybersecurity Framework overview
• NIST - SP 800-53 security controls
• NIST - AI Risk Management Framework

TOP QUESTIONS

Why does NIST matter in data and AI governance?

NIST frameworks translate security and trust principles into actionable controls and processes, widely referenced across industries and regulators.

Category: Relevancy

What is the NIST Cybersecurity Framework?

A best-practice framework for managing cyber risk, organized around Identify, Protect, Detect, Respond, and Recover functions.

Category: Definition

How does NIST support trustworthy AI?

The AI RMF offers guidance to identify, measure, and manage AI risks, fostering transparency, fairness, and accountability.

Category: Impact

What is SP 800-53 used for?

It provides security and privacy controls for information systems, often forming the basis of compliance programs.

Category: Usage

What’s a common mistake when applying NIST guidance?

Treating frameworks as checklists without tailoring controls to organizational context and risk appetite.

Category: Mistakes

How does NIST relate to ISO standards?

Organizations often map NIST controls to ISO frameworks to align global compliance with U.S. expectations.

Category: Interoperability

Where should teams start with NIST materials?

Begin with the Cybersecurity Framework and relevant SP documents, then perform a gap analysis and prioritize controls.

Category: HowTo

Does NIST publish cryptographic standards?

Yes. FIPS standards such as FIPS 140-3 and algorithm guidance inform secure cryptographic implementations.

Category: Standard

What is NVD and why is it important?

The National Vulnerability Database catalogs software vulnerabilities and scoring, supporting risk assessment and patch prioritization.

Category: Overview