Risk management framework for information systems and organizations:
Joint Task Force Transformation Initiative · 2018
3551 et seq., Public Law (P.L.) 113-283.NIST is responsible for developing information security standards and guidelines, including minimum requirements for federal information systems, but such standards and guidelines shall not apply to national security systems without the express approval of the appropriate federal officials exercising policy authority over such systems.This guideline is consistent with requirements of the Office of Management and Budget (OMB) Circular A-130.