These OMB and GAO issuances establish the criteria and rules for assessing and reporting annually on the status of agency systems and controls.
The GAO has brought a lot of significant changes to organizations since they were started.