The National Institute of Standards and Technology (NIST) has developed multiple cybersecurity frameworks. NIST 800-171 serves as the foundation for CMMC. NIST is a set of guidelines, not a regulatory body, while CMMC is a certification program.