________ provides a framework for ensuring the effectiveness of information security controls in government. This legislation is intended to protect government information, operations, and assets from any natural or manmade threat. This requires each federal agency to develop, document, and implement an information security program to protect its information and information systems.
a. NIST SP 800-171
b. FISMA
c. HIPAA
d. GDPR