NIST (National Institute of Standards and Technology, US Department of Commerce) established a standards framework , initially in 2014, and updated continually since, as a set of standards, guidelines and best practices to manage cybersecurity risk immediately across various industries.