These OMB and GAO issuances establish the criteria and rules for assessing and reporting annually on the status of agency systems and controls.
The criteria and rules for reporting on agency systems and controls are brought into action by the OMB and GAO.