The goals of NIST are threefold.
To provide a comprehensive and flexible catalogue of controls for current and future protection based on changing technology and threats
To develop a foundation for assessing techniques and processes for determining control effectiveness
To improve communication across organizations via a common lexicon for discussion of risk management concepts.
Read more here: https://www.strongboxit.com/fisma-and-nist-in-fintech-cybersecurity/
