Cybersecurity standards are the strategy, policies, security controls, best practices, technologies, and tools an organization uses to protect its IT environment from risk and cyber threat. Cybersecurity standards are typically published in a document that serves as a guideline for decision-makers, a statement of information security requirements, and a baseline for benchmarking cybersecurity performance over time.