Under the requirements of the Computer Security Act , NIST is responsible for establishing standards for federal computer systems that process sensitive but unclassified information .
NIST is not responsible for establishing federal computer system standards at all .