NIST

The National Institute of Standards and Technology (NIST) has published a series of protocols that govern risk assessment and minimum precautions for government systems. These protocols are mandatory for use by the FDIC and other Federal regulators, and recommended for financial and medical companies by such regulators as FFIEC and CMS. The protocols are also long, complex, and confusing. For example, more than 90 NIST protocols relate to minimum safeguards under FISMA.

ACR 2 Solutions, Inc. has "Turbo-Taxed" NIST and FIS protocols into a series of straightforward fill-in-the-blank software packages called ACR2.