NIST SP 800-37 comports under OMB Circular A-130; but it was developed by NIST under what authority; which is PL 107-347? Response:

NIST SP 800-37, and many other NIST publications related to federal information security, were developed under the mandate of the Federal Information Security Management Act (FISMA) of 2002, which is Public Law 107-347. FISMA requires federal agencies to implement information security programs, and NIST provides the standards and guidelines to achieve this.

NIST is the organization responsible for developing the standards, not the legal authority empowering their creation.

POAM (Plan of Action and Milestones) is a document used in risk management to track corrective actions, not a legislative authority.

SDLC (Systems Development Life Cycle) is a process used for developing information systems, not a legislative authority for NIST publications.