OMB, NIST, and agency responsibilities regarding information security were recently reemphasized in the Clinger-Cohen Act of 1996, formerly named the Information Technology Management Reform Act of 1996.
The  Clinger-Cohen Act of 1996 used to be named the Information Technology Management Reform Act of 1996.
NOECs variance of up to three concentration levels are considered acceptable as far as precision goes.