National Institute of Standards and Technology
The United States National Institute of Standards and Technology, producer of structuring cybersecurity resources. Maintains the Cybersecurity Framework (CSF) and the National Vulnerability Database (NVD), which assigns scores and metadata to disclosed flaws. A normative framework and one of the most widely used vulnerability databases.
The Cybersecurity Framework results from a public-consultation and consensus process. The vulnerability database enriches CVE identifiers with standardised severity scores; the completeness and timeliness of that enrichment depend on the body's processing capacity.
Use as a security-maturity framework (CSF) and as a vulnerability-severity source (NVD) in a risk assessment. Foundational technical reading for underwriting.