Under the requirements of the Computer Security Act , NIST is responsible for establishing standards for federal computer systems that process sensitive but unclassified information .
The Computer Security Act has requirements relating to sensitive information .