If you are developing for an agency under the US Department of Commerce, you must follow the NIST standards, full stop. It's the law. (And with all things regarding the law, check with your organization's legal department, don't trust me blindly.)
If you are developing for an agency under the US Department of Commerce, you must follow the NIST standards, full stop. It's the law. (And with all things regarding the law, check with your organization's legal department, don't trust me blindly.)