There's actual several mentions of NIST, ATOs, and FISMA, all of which implicitly cover FIPS by reference.

#acronymheatdeath