The Act covers programs for both unclassified and national security systems, but exempts agencies operating national security systems from OMB oversight.
Another agency is responsible for oversight of these agencies.