SECAI Core · phase 8 of 15 · noun
National Institute of Standards and Technology
A nonregulatory government agency that develops computer security standards used by US federal agencies and publishes best practice guides and research.
The Explain card
- Plain English
- NIST is a nonregulatory US government agency that develops computer security standards used by federal agencies and publishes best-practice guides and research that the wider industry adopts.
- Example
- A security team building an AI assurance program borrows from NIST publications: the Cybersecurity Framework for overall structure, the SP 800-53 control catalog for specific safeguards, and the AI Risk Management Framework for AI-specific risk.
- Why it matters
- NIST guidance is free, widely respected and often referenced in contracts and regulations. Aligning AI security controls to NIST makes them easier to defend to auditors and easier to explain to executives.
- Hook
- The standards body that does not fine you, but everyone quotes.
Word knowledge
How the word is built, where it came from, and what it sits beside in memory.
In a sentence
The assessor maps each model safeguard to a National Institute of Standards and Technology SP 800-53 control ID in the system security plan.
Why these words
- National Latin nationalis, of a nation, from natio, a people born together marks the body as belonging to the nation rather than to a state, a firm, or a trade group
- Institute Latin institutum, a thing set up, from instituere, to put in place supplies the head noun, so the stack names an establishment rather than a bureau or an office
- of Old English of, away from the genitive hinge, so the institute belongs to the work named next
- Standards Old French estandard, a rallying flag, later an authorized measure names the authorized measures the institute is there to keep
- and Old English and, also joins the second object so the charge is two things, not one
- Technology Greek tekhnologia, systematic treatment of an art, from tekhne, craft names the applied-arts half of the charge, the industrial work joined to the measures
Where it came from
- Origin
- English official title from the Omnibus Trade and Competitiveness Act of 1988, stacking national (Latin nationalis, of a nation), institute (Latin institutum, a thing set up), standards (Old French estandard, a rallying flag), and technology (Greek tekhnologia, systematic treatment of an art)
- Entered the language
- 1988
- What changed
- National had meant of a people born together, then of a sovereign state. Institute had meant a precept, then a body set up to study, after the French Institut of 1795. Standard had meant a rallying flag, then an authorized measure of quality. Technology had meant a treatise on an art, then the industrial arts themselves. Congress joined the four content words in 1988 as the new title of the former National Bureau of Standards, adding Technology to mark industrial competitiveness as part of the charge.
How it is spelled
- Pattern
- national keeps Latin -al from nationalis, as in original and cultural
- Pattern
- institute keeps Latin st from statuere, as in constitute and substitute
- Pattern
- standard keeps Old French esta- reduced to sta-, as in stand
- Pattern
- technology writes Greek χ as ch, said /k/, then -ology for a field
- Breaks the pattern
- National, Institute, Standards, and Technology take capitals even mid-sentence; of and and stay lowercase
- Breaks the pattern
- the everyday short form is NIST, an initialism, not a spelling of the phrase
- Breaks the pattern
- technology writes ch for /k/ from Greek χ, never the /tʃ/ of church
Spelled like
- international
- constitution
- standing
- technical
Broken into chunks
-
nat
- native
- nation
- innate
-
al
- cultural
- original
- typical
-
stit
- constitute
- substitute
- institution
-
stand
- standing
- withstand
- outstanding
-
techn
- technical
- technician
- polytechnic
-
ology
- biology
- geology
- mythology
What it sits beside
Same subject
- NIST AI Risk Management Framework (AI RMF)
- ISO/IEC 42001:2023
- Organisation for Economic Co-operation and Development
- NIST National Vulnerability Database (NVD)
Same shape
- National Science Foundation
- National Institutes of Health
- National Aeronautics and Space Administration
- Institute of Electrical and Electronics Engineers
US federal science agencies
- National Science Foundation
- National Aeronautics and Space Administration
- National Institutes of Health
Standards-developing organizations
- International Organization for Standardization
- International Electrotechnical Commission
- American National Standards Institute
National ... of ... official titles
- National Institutes of Health
- National Academy of Sciences
Where it sits in the deck
Phase 8: Governance, Risk, and Compliance Frameworks
Individual controls need a governance envelope — introduce the risk and compliance structures, standards bodies, and regulations that frame AI accountability at scale.