Government-Related Regulatory Compliance

---

In information security and compliance, standards often come from the series of Special Publications (SPs) created by the US National Institute of Standards and Technology (NIST).

• NIST is not a regulatory agency
• But, its standards get required by other governmental means

Key Compliance Standards

• Federal Information Security Management Act (FISMA)
• Federal Risk and Authorization Management Program (FedRAMP)