Public Law (P.L.) 113-283. NIST is responsible for developing information security standards. and guidelines, incl uding minimum requirements for federal information systems, but such. standards and guidelines shall not apply to national security systems without the express approval.