Even though it is a process for self-certification, NIST is widely acknowledged. ISO 27001 provides 14 control categories with 114 controls and has 10 management clauses to guide organizations through their information security management systems. NIST frameworks have a variety of control catalogs and five functions to customize cybersecurity controls.