Pursuant to the Computer Security Act of 1987 (Public Law 100–235;
101 Stat. 1724), the National Institute of Standards and Technology shall be responsible for developing and proposing standards and guidelines needed to assure the cost-effective security and privacy of sensitive information in Federal computer systems.