The act requires that the National Institute of Standards and Technology develop standards and guidelines for computer systems to control loss and unauthorized modification or disclosure of sensitive information and to prevent computer-related fraud and misuse.
The National Institute of Standards and Technology needs to have guidelines.