A U.S. federal agency that creates standards and guidelines, including those for cybersecurity practices, to help federal agencies meet federal statutory requirements.