NIST Is a Standard-Setting Agency, Not a Regulator
Congressional House Republicans have introduced a proposal to make the National Institutes for Standards and Technology (NIST) responsible for cybersecurity audits across the government.[REF] The idea is flawed in many respects—most especially because asking NIST to do an audit is asking them to do something they simply have never done before.
United States Office Of Personnel Management Government Accountability Office Trump Administration Office Of Management Department Of Homeland Security
Source: heritage.org