NIST

TECHNICAL DEFINITION

The National Institute of Standards and Technology (NIST) is a non-regulatory U.S. federal agency under the Department of Commerce, responsible for developing technology, metrics, and standards, most notably its influential cybersecurity frameworks (e.g., NIST CSF, SP 800 series, FIPS) which are critical for managing cyber risk and achieving compliance across U.S. federal agencies, defense industrial base, and critical infrastructure sectors.

BACKGROUND

The NIST Cybersecurity Framework, is a set of guidelines designed to help organizations assess and improve their preparedness against cybersecurity threats. Developed in 2014 by the U.S. National Institute of Standards and Technology, the framework has been adopted by cyber security professionals and organizations around the world. The NIST framework has provided a basis for communication and understanding of cybersecurity principles between organizations, both in the private sector and public, such as governments. The framework, which is publicly available online for free, provides recommendations of existing cybersecurity standards and actions that organizations can take to mitigate cybersecurity risk.

SYNONYMS & ALIASES

• National Institute of Standards and Technology
• NIST Standards
• NIST Framework
• NIST Guidelines
• FIPS
• SP 800 Series

USAGE NOTE

In the cybersecurity and defense sectors, 'NIST' commonly refers to its robust publications and frameworks that serve as benchmarks for information security and risk management practices.

DEVELOPERS

Organizations developing technology related to NIST.

• Lockheed Martin

  Develops advanced technology and integrated systems for defense and government, rigorously adhering to and implementing NIST cybersecurity standards in their solutions and software for federal clients.

• RTX (Raytheon Technologies)

  Designs and manufactures advanced technology for aerospace and defense, integrating NIST cybersecurity frameworks into secure systems and services for government and commercial clients.

• Northrop Grumman

  Provides innovative solutions in aerospace, defense, and cyberspace, building secure systems and technologies that comply with stringent NIST cybersecurity guidelines for critical infrastructure and government operations.

• Microsoft

  Develops enterprise software, cloud services (e.g., Azure Government), and security products that help organizations implement and achieve compliance with NIST cybersecurity frameworks, offering tools for risk management and protection.

• Amazon Web Services (AWS)

  Offers cloud computing services designed with security and compliance at their core, enabling customers to build and operate solutions that adhere to NIST cybersecurity standards and controls for federal, defense, and commercial entities.

• Splunk

  Develops security information and event management (SIEM) and security operations platforms that are critical tools for monitoring, analyzing, and reporting on security events to meet NIST compliance requirements and enhance organizational resilience.

• Palo Alto Networks

  Develops and provides cybersecurity platforms, including next-generation firewalls, cloud security, and automation tools, that enable organizations to implement robust security controls aligned with NIST frameworks.

• CrowdStrike

  Develops a leading cloud-native endpoint protection platform that helps organizations implement critical cybersecurity controls related to threat detection, prevention, and response as outlined in NIST guidance.

• Booz Allen Hamilton

  A major consulting and technology integration firm that develops and implements custom cybersecurity solutions and systems for government clients, rigorously applying NIST frameworks and guidelines to ensure robust security postures.

• Tenable

  Develops vulnerability management and security assessment solutions (e.g., Nessus) that are used by organizations to identify and manage security weaknesses, directly supporting NIST's risk management framework and continuous monitoring efforts.