Which of the following apply to contractors operating systems on behalf of DOI?

a$)$The Privacy Act of $1974$

b$)$FISMA of $2014$

c$)$NIST standards