Security Standards We leverage the National Institute of Standards and Technology (NIST) approach (e.g., identify, prevent, detect, respond, recover) and account for technical, geopolitical and/or environmental threat drivers, external inputs, such as regulations and contractual obligations, and internal inputs, such as business objectives and duty of care, to help prioritize security investments and areas of risk focus.