The National Institute of Standards and Technology (NIST) is…

The National Institute of Standards and Technology (NIST) is responsible for developing Federal Information Security Management Act (FISMA)-mandated information security standards and procedures. To be compliant, an organization’s policies must include key security control requirements. Which of the following is not one of the requirements?