The Act covers programs for both unclassified and national security systems, but exempts agencies operating national security systems from OMB oversight.
Several agencies operating systems are exempted from OMB oversight.