本出版物是由NIST开发的法定责任联邦信息安全管理法案（FISMA），公法（P.L）107-347。NIST是负责制定信息安全标准和准则，包括美国联邦信息系统的最低要求，但这些标准和准则不适用于国家安全系统没有适当的联邦官员行使政策权威等系统的明确批准。-This publication has been developed by NIST to further its statutory responsibilities under the Federal Information Security Management Act (FISMA), Public Law (P.L.) 107-347. NIST is responsible for developing information security standards and guidelines, including minimum requirements for federal information systems, but such standards and guidelines shall not apply to national security systems without the express approval of appropriate federal officials exercising policy authority over such systems.