NIST Is a Standard-Setting Agency, Not a Regulator
Congressional House Republicans have introduced a proposal to make the National Institutes for Standards and Technology (NIST) responsible for cybersecurity audits across the government.[REF] The idea is flawed in many respects—most especially because asking NIST to do an audit is asking them to do something they simply have never done before.
Source: heritage.org