OMB primarily takes care of federal agencies and their operations, they inspect the cash flow and order of the agency.
OMB's 1996 revision of Circular A-130, Appendix III, recognizes that federal agencies have had difficulty in performing effective risk assessments--expending resources on complex assessments of specific risks with limited tangible benefits in terms of improved security.