A standard with a paper trail The National Institute of Standards and Technology (NIST) published the original SP 800-50, "Building an Information Technology Security Awareness and Training Program," in October 2003. Its abstract states plainly that it supports requirements in the Federal Information Security Management Act (FISMA) of 2002 and OMB Circular A-130, Appendix III. Its focus is on the human element of cyber threats. FISMA was enacted as Title III of the E-Governm