This publication has been developed by NIST to further its statutory responsibilities under the 3 Federal Information Security Modernization Act (FISMA), 44 U.S.C. § 3551 et seq., Public Law 4 (P.L.) 113-283. NIST is responsible for developing information security standards and guidelines, 5 including minimum requirements for federal information systems