To do business with the federal government, contractors and other organizations are required to follow NIST guidelines for protecting the sensitive information they handle.