premise: Under the requirements of the Computer Security Act, NIST is responsible for establishing standards for federal computer systems that process sensitive but unclassified information.
hypothesis: NIST is not responsible for establishing federal computer system standards at all.