Exam CFR-310 topic 1 question 71 discussion

A. NIST. NIST (National Institute of Standards and Technology) is responsible for developing cybersecurity policies and guidelines for U.S. federal government agencies, including the well-known NIST Cybersecurity Framework and the NIST Special Publications (such as SP 800-53), which provide standards for managing information security risk. Here’s a breakdown of the other options: B. ANSI (American National Standards Institute): This organization oversees the creation of voluntary standards for various industries but is not focused specifically on federal cybersecurity. C. NERC (North American Electric Reliability Corporation): NERC focuses on standards related to the reliability of the electrical grid in North America, not general cybersecurity policies. D. GDPR (General Data Protection Regulation): This is a European Union regulation focused on data protection and privacy, not U.S. federal cybersecurity policies.