These requirements are detailed in two OMB Circulars.
The OMB Circulars tell you what you need to know about the requirements.