To determine the applicability of the leading organization's practices to federal agencies, we discussed our findings with numerous federal officials, including officials in OMB's Information Policy and Technology Branch, the Computer Security Division of NIST's Information Technology Laboratory, CIO Council members, the chairman of the Chief Financial Officers Council's systems subcommittee, information security officers from 15 federal agencies, and members of the President's Commission on Critical Infrastructure Protection.
There has been discussion on the applicability of the leading company practices.