Federal regulations indicate that government agencies and federal contractors must follow certain criteria for encryption, handling of personal and sensitive information, and digital signature hashing algorithms. Private corporations are often not required to follow the same standards. However, most of the algorithms and handling procedures outlined by the NIST are well$-$known and fairly straightforward to implement. As such, private corporations not following NIST guidelines may be considered lacking in their Info$-$Sec handling procedures. As a result, the documentation provided by the NIST is often considered the required standard for most companies handling sensitive information. In general, is this a true or false claim?