Under the requirements of the Computer Security Act, NIST is responsible for establishing standards for federal computer systems that process sensitive but unclassified information.
NIST is not responsible for establishing federal computer system standards at all.