Claim: The US Federal Information Processing Standards (FIPS) includes the FIPS 200 specifying maximum security controls for federal information systems.
Evidence: Federal information Processing Standard 200 (FIPS 200), "Minimum Security Requirements for Federal Information and Information Systems", specifies the minimum security controls for federal information systems and the processes by which risk-based selection of security controls occurs.