NIST is a US government org that releases industry guidlines on best practices for cybersecurity.

I know that infosec and sysadmin work aren’t the same, but in my experience it often falls to sysadmins and systems engineers to fill the gaps. Hope this is useful.