OMB has provided guidance since 1985 in its Circular A130, Appendix III, Security of Federal Automated Information Resources, which was updated in February 1996.
An OMB circular providing guidance was updated in 1996.