The act requires that the National Institute of Standards and Technology develop standards and guidelines for computer systems to control loss and unauthorized modification or disclosure of sensitive information and to prevent computer-related fraud and misuse.
The guidelines and standards are all spelled out in the Act.