Skip to content
Directory

NIST Cybersecurity Framework and National Vulnerability Database

National Institute of Standards and Technology

Cybersecurity and threatsTechnical standardContinuousWorld

The United States National Institute of Standards and Technology, producer of structuring cybersecurity resources. Maintains the Cybersecurity Framework (CSF) and the National Vulnerability Database (NVD), which assigns scores and metadata to disclosed flaws. A normative framework and one of the most widely used vulnerability databases.

Methodology

The Cybersecurity Framework results from a public-consultation and consensus process. The vulnerability database enriches CVE identifiers with standardized severity scores; the completeness and timeliness of that enrichment depend on the body's processing capacity.

Recommended use

Use as a security-maturity framework (CSF) and as a vulnerability-severity source (NVD) in a risk assessment. Foundational technical reading for underwriting.

Official source ↗Latest edition: à vérifier
Keywords
Related glossary terms
Similar sources