A standards body is an organization that creates shared technical rules, definitions, or baselines so systems from different vendors can work together and meet common expectations for safety, interoperability, or compliance. Examples include groups that publish security controls, file formats, audit requirements, or testing methods.
In cyber security, standards bodies matter because their outputs often become the default checklist for secure design and procurement. They can shape authentication requirements, logging formats, encryption practices, incident reporting, and AI trustworthiness criteria. Defenders use these baselines to compare products, assess risk, and prove due diligence. Attackers may exploit weak, outdated, or inconsistently implemented standards, and they often benefit when organizations treat compliance as a substitute for real security. In practice, a standards body can influence whether a system is hardened, how it is audited, and what evidence is available after an incident.