To that end, the National Institute of Standards and Technology NIST is used every day as our standard methodology for assessing risk related to hardware, software, systems, and cybersecurity controls.