NIST (National Institute of Standards and Technology)
A U.S. federal agency that develops widely adopted cybersecurity standards and frameworks, including the Cybersecurity Framework (CSF) and guidelines for IoT and industrial control system security.
What is NIST (National Institute of Standards and Technology)?
A U.S. federal agency that develops widely adopted cybersecurity standards and frameworks, including the Cybersecurity Framework (CSF) and guidelines for IoT and industrial control system security.
The National Institute of Standards and Technology (NIST) is a U.S. federal agency within the Department of Commerce that develops measurement standards, guidelines, and frameworks across science, technology, and industry. In cybersecurity, NIST's publications have become among the most widely cited and adopted security references globally, shaping security programs far beyond their original federal mandate.
NIST's cybersecurity output spans multiple programs. NIST SP 800-series publications provide detailed technical guidance on specific security topics: SP 800-82 for industrial control systems, SP 800-213 for IoT cybersecurity, SP 800-207 for Zero Trust Architecture. The NIST Cybersecurity Framework (CSF) provides an executive-level organizational model. The NIST Privacy Framework addresses data privacy. The National Vulnerability Database (NVD) maintains the authoritative repository of CVE details and CVSS scores.
For IoT and OT security specifically, NIST has published significant guidance. SP 800-82 (Industrial Control System Security) and the NISTIR 8259 series (IoT Device Cybersecurity) provide actionable guidance for both device manufacturers and asset owners. These publications are influential not just in federal environments but across regulated industries including healthcare and critical infrastructure, where regulators frequently reference NIST standards as the baseline for compliance expectations.
Key Facts
- NIST's National Vulnerability Database (NVD) contains CVSS scores for all published CVEs
- NIST SP 800-82 Rev 3 (2023) updated ICS security guidance to explicitly address modern OT threats
- NISTIR 8259 series provides IoT device cybersecurity baseline requirements for manufacturers
- NIST CSF 2.0 (2024) added a sixth function — Govern — to the original five-function model
How ORDR Addresses NIST (National Institute of Standards and Technology)
ORDR aligns its security capabilities to NIST frameworks, enabling organizations to demonstrate compliance with NIST CSF functions and NIST SP 800-series requirements. ORDR's asset inventory and risk management capabilities directly address NIST CSF's Identify function, while behavioral monitoring and anomaly detection address the Detect function.
See ORDR in actionFrequently Asked Questions
See NIST (National Institute of Standards and Technology) in practice.
ORDR gives security teams complete visibility into every connected asset—and the intelligence to act on what matters most.