About NIST (2024)

Share

The National Institute of Standards and Technology (NIST) was founded in 1901 and is now part of the U.S. Department of Commerce. NIST is one of the nation's oldest physical science laboratories. Congress established the agency to remove a major challenge to U.S. industrial competitiveness at the time — a second-rate measurement infrastructure that lagged behind the capabilities of the United Kingdom, Germany and other economic rivals.

From the smart electric power grid and electronic health records to atomic clocks, advanced nanomaterials and computer chips, innumerable products and services rely in some way on technology, measurement and standards provided by the National Institute of Standards and Technology.

Today, NIST measurements support the smallest of technologies to the largest and most complex of human-made creations — from nanoscale devices so tiny that tens of thousands can fit on the end of a single human hair up to earthquake-resistant skyscrapers and global communication networks.

Mission

To promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life.

Vision

NIST will be the world's leader in creating critical measurement solutions and promoting equitable standards. Our efforts stimulate innovation, foster industrial competitiveness, and improve the quality of life.

Core Competencies

  • Measurement science
  • Rigorous traceability
  • Development and use of standards

Core Values

NIST is an organization with strong values, reflected both in our history and our current work. NIST leadership and staff will uphold these values to ensure a high-performing environment that is safe and respectful of all.

  • Perseverance: We take the long view, planning the future with scientific knowledge and imagination to ensure continued impact and relevance for our stakeholders.
  • Integrity: We are ethical, honest, independent, and provide an objective perspective.
  • Inclusivity: We work collaboratively to harness the diversity of people and ideas, both inside and outside of NIST, to attain the best solutions to multidisciplinary challenges.
  • Excellence: We apply rigor and critical thinking to achieve world-class results and continuous improvement in everything we do.

About NIST (1)

NIST Illustrated

About NIST (2024)

FAQs

What is the purpose of NIST? ›

NIST is the National Institute of Standards and Technology at the U.S. Department of Commerce. The NIST Cybersecurity Framework helps businesses of all sizes better understand, manage, and reduce their cybersecurity risk and protect their networks and data.

Why is NIST so popular? ›

The recent release of the NIST 2.0 version of the Cybersecurity Framework. (CSF) has solidified its position as the most valuable guidance for security practices by bringing valuable enhancements and insights to help organizations of all sizes strengthen their security posture.

Is NIST a federal agency? ›

NIST is a nonregulatory Federal agency within the Commerce Department.

What are the three components of NIST? ›

An Introduction to the Components of the Framework

The Cybersecurity Framework consists of three main components: the Core, Implementation Tiers, and Profiles. The Framework Core provides a set of desired cybersecurity activities and outcomes using common language that is easy to understand.

What is NIST in simple terms? ›

The National Institute of Standards and Technology (NIST) was founded in 1901 and is now part of the U.S. Department of Commerce. NIST is one of the nation's oldest physical science laboratories.

Who needs to comply with NIST? ›

Any company that does business with the United States government should comply with NIST. This includes agencies within the U.S. government, as well as businesses and individuals that the government may hire to perform work on projects.

What is replacing NIST? ›

CMMC is based on both DFARS and NIST 800-171 and includes all 110 controls and more. CMMC Version 1.0 was originally made up of 5 maturity levels. Each level builds upon the preceding level.

Why choose NIST over ISO? ›

NIST CSF is more technical and best suited for the initial stages of a cybersecurity risk program or when attempting to mitigate a breach. Expected costs: ISO 27001 involves a series of audits and certifications that involve a greater expense.

What is the core framework of NIST? ›

Framework Core

The Core includes five high level functions: Identify, Protect, Detect, Respond, and Recover. These 5 functions are not only applicable to cybersecurity risk management, but also to risk management at large. The next level down is the 23 Categories that are split across the five Functions.

Is NIST a law or regulation? ›

NIST compliance is compliance with The National Institute of Standards and Technology is a non-regulatory government agency that develops technology, metrics, and standards to drive innovation and economic competitiveness at U.S.-based organizations in the science and technology industry.

Does the DoD follow NIST? ›

The DoD requires its private sector contractors and subcontractors to comply with the NIST standards. Since they have such a robust list of best practices when it comes to cybersecurity, general security, data security and federal information systems, it's one way to keep the DoD's assets safe.

Who runs NIST? ›

Laurie Locascio. Dr. Laurie Locascio is currently the Under Secretary of Commerce for Standards and Technology and the director of the National Institute of Standards and Technology (NIST).

What are the 5 core functions of NIST? ›

Implementing the NIST Framework Core

The core functions: identify, protect, detect, respond and recover; aid organizations in their effort to spot, manage and counter cybersecurity events promptly.

What are the 4 stages of NIST? ›

The NIST incident response lifecycle breaks incident response down into four main phases: Preparation; Detection and Analysis; Containment, Eradication, and Recovery; and Post-Event Activity.

What is the most common NIST? ›

The three most important frameworks NIST has established are the NIST Cybersecurity Framework (CSF), NIST 800-53, and NIST 800-171.

What is the purpose of the NIST risk assessment? ›

The process of identifying risks to agency operations (including mission, functions, image, or reputation), agency assets, or individuals by determining the probability of occurrence, the resulting impact, and additional security controls that would mitigate this impact.

Top Articles
Latest Posts
Article information

Author: Patricia Veum II

Last Updated:

Views: 5625

Rating: 4.3 / 5 (64 voted)

Reviews: 95% of readers found this page helpful

Author information

Name: Patricia Veum II

Birthday: 1994-12-16

Address: 2064 Little Summit, Goldieton, MS 97651-0862

Phone: +6873952696715

Job: Principal Officer

Hobby: Rafting, Cabaret, Candle making, Jigsaw puzzles, Inline skating, Magic, Graffiti

Introduction: My name is Patricia Veum II, I am a vast, combative, smiling, famous, inexpensive, zealous, sparkling person who loves writing and wants to share my knowledge and understanding with you.