The National Institute of Standards and Technology, (NIST,) and International Standardization Organization, (ISO,) have created frameworks to be followed when creating your policy or checking an existing policy. Certain laws may require that your policy adhere to NIST guidelines.