NIST recommends that such entities be encouraged to provide a level of safety that equals or exceeds the level of safety that would be provided by strict compliance