NIST develops cybersecurity and privacy standards, guidelines, best practices, and resources to meet the needs of U.S. industry, federal agencies, and the broader public. Our activities range from producing specific information that organizations can put into practice immediately to longer-term research that anticipates future challenges and technological advancements.
Our cybersecurity and privacy work is driven by the needs of U.S. industry and the broader public — and is sometimes defined by federal statutes, executive orders, and policies. NIST also advances the understanding and improves the management of privacy risks — some of which relate directly to cybersecurity.
We engage vigorously with stakeholders to set priorities and ensure that our resources address key issues that they face. Priority areas to which NIST contributes include:
The President’s Executive Order (EO) on Sustaining Select Efforts to Strengthen the Nation’s Cybersecurity and Amending Executive Order 13694 and Executive Order 14144 issued on June 6, 2025, charges multiple agencies – including NIST – to strengthen the nation’s cybersecurity by focusing on critical protections against foreign cyber threats and enhancing secure technology practices. Learn more about NIST responsibilities outlined in the EO.