Which organization develops computer security standards used by US federal agencies and publishes best practice guides and research?

Which organization develops computer security standards used by US federal agencies and publishes best practice guides and research?

• A. National Institute of Standards and Technology (NIST)
• B. Cybersecurity frameworks (CSF)
• C. Security controls
• D. Identity and access management (IAM)

Answer: (A)

The organization being described is the national body that creates official standards and publishes guidance for the government’s cybersecurity needs. NIST, the National Institute of Standards and Technology, operates under the U.S. Department of Commerce and develops computer security standards used by federal agencies, along with extensive best-practice guides and research. You’ll see standards like FIPS and the SP 800-series, as well as the Cybersecurity Framework, all associated with NIST. The other terms aren’t organizations: the Cybersecurity Framework is a framework published by NIST, not a standalone organization; security controls are a class of safeguards; Identity and Access Management is a security domain.

The organization being described is the national body that creates official standards and publishes guidance for the government’s cybersecurity needs. NIST, the National Institute of Standards and Technology, operates under the U.S. Department of Commerce and develops computer security standards used by federal agencies, along with extensive best-practice guides and research. You’ll see standards like FIPS and the SP 800-series, as well as the Cybersecurity Framework, all associated with NIST.

The other terms aren’t organizations: the Cybersecurity Framework is a framework published by NIST, not a standalone organization; security controls are a class of safeguards; Identity and Access Management is a security domain.