Which organization develops standards and guidelines referenced in security and IT?

Which organization develops standards and guidelines referenced in security and IT?

• A. Accounting
• B. Nist
• C. Generic Accounts
• D. Mandatory Vacations

Answer: (B)

Standards and guidelines for security and IT are produced by recognized standard-setting organizations, with NIST playing a central role in the United States. NIST, the National Institute of Standards and Technology, creates widely used cybersecurity standards and guidelines, such as the NIST SP 800-series and the Cybersecurity Framework. These materials are referenced by government agencies and the broader industry to guide risk management, controls, and secure system design. The other choices don’t function as standard-setting bodies for IT security: accounting is a financial field, generic accounts refer to types of user accounts, and mandatory vacations describe a control practice rather than an organization that publishes standards.

Standards and guidelines for security and IT are produced by recognized standard-setting organizations, with NIST playing a central role in the United States. NIST, the National Institute of Standards and Technology, creates widely used cybersecurity standards and guidelines, such as the NIST SP 800-series and the Cybersecurity Framework. These materials are referenced by government agencies and the broader industry to guide risk management, controls, and secure system design. The other choices don’t function as standard-setting bodies for IT security: accounting is a financial field, generic accounts refer to types of user accounts, and mandatory vacations describe a control practice rather than an organization that publishes standards.