Which of the following describes United States federal government cybersecurity policies and guidelines?

The National Institute of Standards and Technology (NIST) is a non-regulatory agency of the United States Department of Commerce. A primary part of its mission is to develop and promote standards, guidelines, and best practices to manage cybersecurity risk. Under the Federal Information Security Management Act (FISMA), U.S. federal agencies are mandated to use NIST standards and guidelines to secure their information and information systems. Key examples include the NIST Cybersecurity Framework and the Special Publication (SP) 800 series, which are foundational to U.S. federal cybersecurity policy and operations.

B. ANSI: The American National Standards Institute is a private, non-profit organization that coordinates the U.S. voluntary standards system; it does not create federal government policies.

C. NERC: The North American Electric Reliability Corporation develops and enforces reliability standards specifically for the bulk power system in North America, not for the entire U.S. government.

D. GDPR: The General Data Protection Regulation is a legal framework for data protection and privacy in the European Union, not a U.S. federal policy.

1. National Institute of Standards and Technology (NIST). (2022). FISMA Implementation Project Overview. NIST Computer Security Resource Center. "The Federal Information Security Modernization Act (FISMA) of 2014 (44 U.S.C. § 3551 et seq.) gives NIST responsibility for developing standards and guidelines needed to support the implementation of and compliance with FISMA." Retrieved from https://csrc.nist.gov/projects/fisma-implementation

2. U.S. Congress. (2014). Federal Information Security Modernization Act of 2014. Public Law 113-283

113th Congress. Section 2(c)(1) explicitly assigns NIST the responsibility to "develop and periodically revise standards and guidelines for Federal information systems."

3. North American Electric Reliability Corporation (NERC). (n.d.). About NERC. "The North American Electric Reliability Corporation (NERC) is a not-for-profit international regulatory authority whose mission is to assure the effective and efficient reduction of risks to the reliability and security of the grid." Retrieved from https://www.nerc.com/AboutNERC/Pages/default.aspx

4. American National Standards Institute (ANSI). (n.d.). About ANSI Overview. "As the voice of the U.S. standards and conformity assessment system

the American National Standards Institute (ANSI) empowers its members and constituents to strengthen the U.S. marketplace position in the global economy..." Retrieved from https://www.ansi.org/about