Under the requirements of the Computer Security Act, NIST is responsible for establishing standards for federal computer systems that process sensitive but unclassified information.
The Computer Security Act has requirements relating to sensitive information.