The similarities and overlaps between the NIST Cybersecurity Framework and ISO 27001 are explored in these texts. Both frameworks have their own purposes and roles within a security roadmap, with NIST guiding overall security needs and ISO 27001 providing a way to demonstrate compliance. ISO 27002 serves as the ISO equivalent to NIST 800-53, and emphasizes the importance of risk management in implementing security controls. The frameworks also differ in terms of their approach to certification, with ISO 27001 involving auditors and certifying bodies while NIST is voluntary.