Skip to content
🚧 Early alpha — building the foundation. See the roadmap →

NIST

Created Updated

Standard body — creates and publishes foundational cybersecurity frameworks used worldwide.

FrameworkDescriptionEvolution pattern
SP 800-53Security and privacy controls (1000+)Ad-hoc, ~5-10yr cycle
CSF 2.0Cybersecurity Framework (6 functions)Ad-hoc, ~5-10yr cycle
OSCALMachine-readable control formatSemVer, active development
RMFRisk Management FrameworkStable

Also runs the OLIR crosswalk program and CPRT interactive tool.

NIST frameworks are the most commonly imported. The EvolutionPattern for 800-53: ad_hoc cadence, managed breaking changes, immutable IDs, structured_incomplete changelog.