View article

This publication has been developed by NIST to further its statutory responsibilities under the Federal 2 Information Security Management Act (FISMA), Public Law (PL) 107-347. NIST is responsible for 3 developing information security standards and guidelines, including minimum requirements for Federal 4 information systems, but such standards and guidelines shall not apply to national security systems 5 without the express approval of appropriate Federal officials exercising policy authority over such 6 systems. This guideline is consistent with the requirements of the Office of Management and Budget 7 (OMB) Circular A-130, Section 8b (3), Securing Agency Information Systems, as analyzed in Circular A-8 130, Appendix IV: Analysis of Key Sections. Supplemental information is provided in Circular A-130, 9